--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"442d566dec4dad9158d3574e413880479effad04ebc5220720f2ee87a5f9fab6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:43:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:43:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["442d566dec4dad9158d3574e413880479effad04ebc5220720f2ee87a5f9fab6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce6a24861f2e3d59dfe44943df9ca381d708e599247246eba240175ee5c6ffb0"}
{"level":"info","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"442d566dec4dad9158d3574e413880479effad04ebc5220720f2ee87a5f9fab6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"442d566dec4dad9158d3574e413880479effad04ebc5220720f2ee87a5f9fab6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"442d566dec4dad9158d3574e413880479effad04ebc5220720f2ee87a5f9fab6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:43:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/442d566dec4dad9158d3574e413880479effad04ebc5220720f2ee87a5f9fab6"}
{"level":"info","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"442d566dec4dad9158d3574e413880479effad04ebc5220720f2ee87a5f9fab6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"442d566dec4dad9158d3574e413880479effad04ebc5220720f2ee87a5f9fab6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:43:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"442d566dec4dad9158d3574e413880479effad04ebc5220720f2ee87a5f9fab6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"442d566dec4dad9158d3574e413880479effad04ebc5220720f2ee87a5f9fab6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"442d566dec4dad9158d3574e413880479effad04ebc5220720f2ee87a5f9fab6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"442d566dec4dad9158d3574e413880479effad04ebc5220720f2ee87a5f9fab6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/442d566dec4dad9158d3574e413880479effad04ebc5220720f2ee87a5f9fab6"}
{"level":"info","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/442d566dec4dad9158d3574e413880479effad04ebc5220720f2ee87a5f9fab6"}
{"level":"debug","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"442d566dec4dad9158d3574e413880479effad04ebc5220720f2ee87a5f9fab6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:43:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:43:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["442d566dec4dad9158d3574e413880479effad04ebc5220720f2ee87a5f9fab6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"442d566dec4dad9158d3574e413880479effad04ebc5220720f2ee87a5f9fab6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"442d566dec4dad9158d3574e413880479effad04ebc5220720f2ee87a5f9fab6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/442d566dec4dad9158d3574e413880479effad04ebc5220720f2ee87a5f9fab6"}
{"level":"debug","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d66b4bf6e1ffa4fbc0d6fbd6520cf761742c548cbf5db04f2ae5519c6657e42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:43:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d66b4bf6e1ffa4fbc0d6fbd6520cf761742c548cbf5db04f2ae5519c6657e42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d66b4bf6e1ffa4fbc0d6fbd6520cf761742c548cbf5db04f2ae5519c6657e42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:43:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d66b4bf6e1ffa4fbc0d6fbd6520cf761742c548cbf5db04f2ae5519c6657e42"}
{"level":"info","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d66b4bf6e1ffa4fbc0d6fbd6520cf761742c548cbf5db04f2ae5519c6657e42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d66b4bf6e1ffa4fbc0d6fbd6520cf761742c548cbf5db04f2ae5519c6657e42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:43:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6d66b4bf6e1ffa4fbc0d6fbd6520cf761742c548cbf5db04f2ae5519c6657e42","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6d66b4bf6e1ffa4fbc0d6fbd6520cf761742c548cbf5db04f2ae5519c6657e42\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d66b4bf6e1ffa4fbc0d6fbd6520cf761742c548cbf5db04f2ae5519c6657e42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d66b4bf6e1ffa4fbc0d6fbd6520cf761742c548cbf5db04f2ae5519c6657e42"}
{"level":"debug","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d66b4bf6e1ffa4fbc0d6fbd6520cf761742c548cbf5db04f2ae5519c6657e42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d66b4bf6e1ffa4fbc0d6fbd6520cf761742c548cbf5db04f2ae5519c6657e42"}
{"level":"debug","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7323c0ba850d46256dd1af21bfaaccdce89e8b859786ea3a7b66abe30454f09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:43:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7323c0ba850d46256dd1af21bfaaccdce89e8b859786ea3a7b66abe30454f09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7323c0ba850d46256dd1af21bfaaccdce89e8b859786ea3a7b66abe30454f09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7323c0ba850d46256dd1af21bfaaccdce89e8b859786ea3a7b66abe30454f09","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7323c0ba850d46256dd1af21bfaaccdce89e8b859786ea3a7b66abe30454f09"}
{"level":"debug","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7323c0ba850d46256dd1af21bfaaccdce89e8b859786ea3a7b66abe30454f09","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7323c0ba850d46256dd1af21bfaaccdce89e8b859786ea3a7b66abe30454f09"}
{"level":"debug","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d66b4bf6e1ffa4fbc0d6fbd6520cf761742c548cbf5db04f2ae5519c6657e42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:43:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:43:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d66b4bf6e1ffa4fbc0d6fbd6520cf761742c548cbf5db04f2ae5519c6657e42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d66b4bf6e1ffa4fbc0d6fbd6520cf761742c548cbf5db04f2ae5519c6657e42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d66b4bf6e1ffa4fbc0d6fbd6520cf761742c548cbf5db04f2ae5519c6657e42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:43:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d66b4bf6e1ffa4fbc0d6fbd6520cf761742c548cbf5db04f2ae5519c6657e42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d66b4bf6e1ffa4fbc0d6fbd6520cf761742c548cbf5db04f2ae5519c6657e42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d66b4bf6e1ffa4fbc0d6fbd6520cf761742c548cbf5db04f2ae5519c6657e42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7323c0ba850d46256dd1af21bfaaccdce89e8b859786ea3a7b66abe30454f09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:43:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:43:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7323c0ba850d46256dd1af21bfaaccdce89e8b859786ea3a7b66abe30454f09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d66b4bf6e1ffa4fbc0d6fbd6520cf761742c548cbf5db04f2ae5519c6657e42"}
{"level":"info","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7323c0ba850d46256dd1af21bfaaccdce89e8b859786ea3a7b66abe30454f09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7323c0ba850d46256dd1af21bfaaccdce89e8b859786ea3a7b66abe30454f09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d66b4bf6e1ffa4fbc0d6fbd6520cf761742c548cbf5db04f2ae5519c6657e42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46124bfc24243892a02fb411b11f6e90702e525d3d3f75334587b4416af6f0a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:43:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d66b4bf6e1ffa4fbc0d6fbd6520cf761742c548cbf5db04f2ae5519c6657e42"}
{"level":"info","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46124bfc24243892a02fb411b11f6e90702e525d3d3f75334587b4416af6f0a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46124bfc24243892a02fb411b11f6e90702e525d3d3f75334587b4416af6f0a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46124bfc24243892a02fb411b11f6e90702e525d3d3f75334587b4416af6f0a0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7323c0ba850d46256dd1af21bfaaccdce89e8b859786ea3a7b66abe30454f09"}
{"level":"debug","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d66b4bf6e1ffa4fbc0d6fbd6520cf761742c548cbf5db04f2ae5519c6657e42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:43:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:43:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d66b4bf6e1ffa4fbc0d6fbd6520cf761742c548cbf5db04f2ae5519c6657e42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46124bfc24243892a02fb411b11f6e90702e525d3d3f75334587b4416af6f0a0"}
{"level":"info","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d66b4bf6e1ffa4fbc0d6fbd6520cf761742c548cbf5db04f2ae5519c6657e42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46124bfc24243892a02fb411b11f6e90702e525d3d3f75334587b4416af6f0a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:43:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:43:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46124bfc24243892a02fb411b11f6e90702e525d3d3f75334587b4416af6f0a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46124bfc24243892a02fb411b11f6e90702e525d3d3f75334587b4416af6f0a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d66b4bf6e1ffa4fbc0d6fbd6520cf761742c548cbf5db04f2ae5519c6657e42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:43:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d66b4bf6e1ffa4fbc0d6fbd6520cf761742c548cbf5db04f2ae5519c6657e42"}
{"level":"info","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d66b4bf6e1ffa4fbc0d6fbd6520cf761742c548cbf5db04f2ae5519c6657e42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46124bfc24243892a02fb411b11f6e90702e525d3d3f75334587b4416af6f0a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:43:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46124bfc24243892a02fb411b11f6e90702e525d3d3f75334587b4416af6f0a0"}
{"level":"info","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46124bfc24243892a02fb411b11f6e90702e525d3d3f75334587b4416af6f0a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d66b4bf6e1ffa4fbc0d6fbd6520cf761742c548cbf5db04f2ae5519c6657e42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46124bfc24243892a02fb411b11f6e90702e525d3d3f75334587b4416af6f0a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:43:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:43:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46124bfc24243892a02fb411b11f6e90702e525d3d3f75334587b4416af6f0a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d66b4bf6e1ffa4fbc0d6fbd6520cf761742c548cbf5db04f2ae5519c6657e42"}
{"level":"info","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46124bfc24243892a02fb411b11f6e90702e525d3d3f75334587b4416af6f0a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c50221d222fb7b8ff4e11098df6b62d7b0c78ec2bc8847434de1ac76313f7c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:43:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c50221d222fb7b8ff4e11098df6b62d7b0c78ec2bc8847434de1ac76313f7c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d66b4bf6e1ffa4fbc0d6fbd6520cf761742c548cbf5db04f2ae5519c6657e42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:43:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:43:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d66b4bf6e1ffa4fbc0d6fbd6520cf761742c548cbf5db04f2ae5519c6657e42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46124bfc24243892a02fb411b11f6e90702e525d3d3f75334587b4416af6f0a0"}
{"level":"info","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d66b4bf6e1ffa4fbc0d6fbd6520cf761742c548cbf5db04f2ae5519c6657e42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46124bfc24243892a02fb411b11f6e90702e525d3d3f75334587b4416af6f0a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c50221d222fb7b8ff4e11098df6b62d7b0c78ec2bc8847434de1ac76313f7c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:43:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c50221d222fb7b8ff4e11098df6b62d7b0c78ec2bc8847434de1ac76313f7c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d66b4bf6e1ffa4fbc0d6fbd6520cf761742c548cbf5db04f2ae5519c6657e42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c50221d222fb7b8ff4e11098df6b62d7b0c78ec2bc8847434de1ac76313f7c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c50221d222fb7b8ff4e11098df6b62d7b0c78ec2bc8847434de1ac76313f7c8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c50221d222fb7b8ff4e11098df6b62d7b0c78ec2bc8847434de1ac76313f7c8"}
{"level":"debug","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1edd13fde491117a3f42dec424aca3dba7896c1b09f842b8f635e841d64029d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:43:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1edd13fde491117a3f42dec424aca3dba7896c1b09f842b8f635e841d64029d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1edd13fde491117a3f42dec424aca3dba7896c1b09f842b8f635e841d64029d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c50221d222fb7b8ff4e11098df6b62d7b0c78ec2bc8847434de1ac76313f7c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c50221d222fb7b8ff4e11098df6b62d7b0c78ec2bc8847434de1ac76313f7c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c50221d222fb7b8ff4e11098df6b62d7b0c78ec2bc8847434de1ac76313f7c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1edd13fde491117a3f42dec424aca3dba7896c1b09f842b8f635e841d64029d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c50221d222fb7b8ff4e11098df6b62d7b0c78ec2bc8847434de1ac76313f7c8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46124bfc24243892a02fb411b11f6e90702e525d3d3f75334587b4416af6f0a0"}
{"level":"debug","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1edd13fde491117a3f42dec424aca3dba7896c1b09f842b8f635e841d64029d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d66b4bf6e1ffa4fbc0d6fbd6520cf761742c548cbf5db04f2ae5519c6657e42"}
{"level":"info","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c50221d222fb7b8ff4e11098df6b62d7b0c78ec2bc8847434de1ac76313f7c8"}
{"level":"debug","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1edd13fde491117a3f42dec424aca3dba7896c1b09f842b8f635e841d64029d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1edd13fde491117a3f42dec424aca3dba7896c1b09f842b8f635e841d64029d"}
{"level":"info","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1edd13fde491117a3f42dec424aca3dba7896c1b09f842b8f635e841d64029d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feabe433fda41bba107cd610b62ca28355f6bd391e7e5060580ce1bf62efaa60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feabe433fda41bba107cd610b62ca28355f6bd391e7e5060580ce1bf62efaa60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1edd13fde491117a3f42dec424aca3dba7896c1b09f842b8f635e841d64029d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1edd13fde491117a3f42dec424aca3dba7896c1b09f842b8f635e841d64029d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feabe433fda41bba107cd610b62ca28355f6bd391e7e5060580ce1bf62efaa60"}
{"level":"info","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1edd13fde491117a3f42dec424aca3dba7896c1b09f842b8f635e841d64029d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feabe433fda41bba107cd610b62ca28355f6bd391e7e5060580ce1bf62efaa60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["feabe433fda41bba107cd610b62ca28355f6bd391e7e5060580ce1bf62efaa60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1edd13fde491117a3f42dec424aca3dba7896c1b09f842b8f635e841d64029d"}
{"level":"info","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feabe433fda41bba107cd610b62ca28355f6bd391e7e5060580ce1bf62efaa60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1edd13fde491117a3f42dec424aca3dba7896c1b09f842b8f635e841d64029d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feabe433fda41bba107cd610b62ca28355f6bd391e7e5060580ce1bf62efaa60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feabe433fda41bba107cd610b62ca28355f6bd391e7e5060580ce1bf62efaa60"}
{"level":"info","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feabe433fda41bba107cd610b62ca28355f6bd391e7e5060580ce1bf62efaa60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feabe433fda41bba107cd610b62ca28355f6bd391e7e5060580ce1bf62efaa60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["feabe433fda41bba107cd610b62ca28355f6bd391e7e5060580ce1bf62efaa60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1edd13fde491117a3f42dec424aca3dba7896c1b09f842b8f635e841d64029d"}
{"level":"info","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feabe433fda41bba107cd610b62ca28355f6bd391e7e5060580ce1bf62efaa60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bef0938066ce645dd9f160bc712134164dff0c48cc3130eb87a260546693f903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:43:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bef0938066ce645dd9f160bc712134164dff0c48cc3130eb87a260546693f903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1edd13fde491117a3f42dec424aca3dba7896c1b09f842b8f635e841d64029d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feabe433fda41bba107cd610b62ca28355f6bd391e7e5060580ce1bf62efaa60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feabe433fda41bba107cd610b62ca28355f6bd391e7e5060580ce1bf62efaa60"}
{"level":"info","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feabe433fda41bba107cd610b62ca28355f6bd391e7e5060580ce1bf62efaa60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e83a8ef3d58361655fb02946890f7adf5f53a22fb056e37ee0c0c4a4a5ccb80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:43:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bef0938066ce645dd9f160bc712134164dff0c48cc3130eb87a260546693f903"}
{"level":"info","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e83a8ef3d58361655fb02946890f7adf5f53a22fb056e37ee0c0c4a4a5ccb80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bef0938066ce645dd9f160bc712134164dff0c48cc3130eb87a260546693f903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bef0938066ce645dd9f160bc712134164dff0c48cc3130eb87a260546693f903"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bef0938066ce645dd9f160bc712134164dff0c48cc3130eb87a260546693f903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e796b73fe3b83ae3e46f2e635c1454862bc5248caa9d6cb6925e1d644dee6fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:43:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e83a8ef3d58361655fb02946890f7adf5f53a22fb056e37ee0c0c4a4a5ccb80"}
{"level":"info","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e796b73fe3b83ae3e46f2e635c1454862bc5248caa9d6cb6925e1d644dee6fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feabe433fda41bba107cd610b62ca28355f6bd391e7e5060580ce1bf62efaa60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["feabe433fda41bba107cd610b62ca28355f6bd391e7e5060580ce1bf62efaa60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e796b73fe3b83ae3e46f2e635c1454862bc5248caa9d6cb6925e1d644dee6fa"}
{"level":"info","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feabe433fda41bba107cd610b62ca28355f6bd391e7e5060580ce1bf62efaa60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e83a8ef3d58361655fb02946890f7adf5f53a22fb056e37ee0c0c4a4a5ccb80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e83a8ef3d58361655fb02946890f7adf5f53a22fb056e37ee0c0c4a4a5ccb80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e83a8ef3d58361655fb02946890f7adf5f53a22fb056e37ee0c0c4a4a5ccb80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bef0938066ce645dd9f160bc712134164dff0c48cc3130eb87a260546693f903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1e7b3a36be8c501c2188990da07a0ec67d60ec50ce7566c918eb44876872137","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:43:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feabe433fda41bba107cd610b62ca28355f6bd391e7e5060580ce1bf62efaa60"}
{"level":"info","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1e7b3a36be8c501c2188990da07a0ec67d60ec50ce7566c918eb44876872137","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e796b73fe3b83ae3e46f2e635c1454862bc5248caa9d6cb6925e1d644dee6fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e796b73fe3b83ae3e46f2e635c1454862bc5248caa9d6cb6925e1d644dee6fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bef0938066ce645dd9f160bc712134164dff0c48cc3130eb87a260546693f903"}
{"level":"info","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e796b73fe3b83ae3e46f2e635c1454862bc5248caa9d6cb6925e1d644dee6fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feabe433fda41bba107cd610b62ca28355f6bd391e7e5060580ce1bf62efaa60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e83a8ef3d58361655fb02946890f7adf5f53a22fb056e37ee0c0c4a4a5ccb80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e83a8ef3d58361655fb02946890f7adf5f53a22fb056e37ee0c0c4a4a5ccb80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1e7b3a36be8c501c2188990da07a0ec67d60ec50ce7566c918eb44876872137","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e796b73fe3b83ae3e46f2e635c1454862bc5248caa9d6cb6925e1d644dee6fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e83a8ef3d58361655fb02946890f7adf5f53a22fb056e37ee0c0c4a4a5ccb80"}
{"level":"debug","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e83a8ef3d58361655fb02946890f7adf5f53a22fb056e37ee0c0c4a4a5ccb80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e83a8ef3d58361655fb02946890f7adf5f53a22fb056e37ee0c0c4a4a5ccb80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e83a8ef3d58361655fb02946890f7adf5f53a22fb056e37ee0c0c4a4a5ccb80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1e7b3a36be8c501c2188990da07a0ec67d60ec50ce7566c918eb44876872137","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1e7b3a36be8c501c2188990da07a0ec67d60ec50ce7566c918eb44876872137"}
{"level":"info","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1e7b3a36be8c501c2188990da07a0ec67d60ec50ce7566c918eb44876872137","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e83a8ef3d58361655fb02946890f7adf5f53a22fb056e37ee0c0c4a4a5ccb80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1e7b3a36be8c501c2188990da07a0ec67d60ec50ce7566c918eb44876872137","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1e7b3a36be8c501c2188990da07a0ec67d60ec50ce7566c918eb44876872137"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e796b73fe3b83ae3e46f2e635c1454862bc5248caa9d6cb6925e1d644dee6fa"}
{"level":"info","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1e7b3a36be8c501c2188990da07a0ec67d60ec50ce7566c918eb44876872137","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1e7b3a36be8c501c2188990da07a0ec67d60ec50ce7566c918eb44876872137","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1e7b3a36be8c501c2188990da07a0ec67d60ec50ce7566c918eb44876872137","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feabe433fda41bba107cd610b62ca28355f6bd391e7e5060580ce1bf62efaa60"}
{"level":"info","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e83a8ef3d58361655fb02946890f7adf5f53a22fb056e37ee0c0c4a4a5ccb80"}
{"level":"info","ts":"2026-07-07T17:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1e7b3a36be8c501c2188990da07a0ec67d60ec50ce7566c918eb44876872137"}
{"level":"debug","ts":"2026-07-07T17:43:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1f294577397a34276e5d869404b5c5cc550d5f3e84a44f230beb2db970031ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:43:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:43:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1f294577397a34276e5d869404b5c5cc550d5f3e84a44f230beb2db970031ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1f294577397a34276e5d869404b5c5cc550d5f3e84a44f230beb2db970031ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:43:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:43:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1f294577397a34276e5d869404b5c5cc550d5f3e84a44f230beb2db970031ec"}
{"level":"info","ts":"2026-07-07T17:43:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1f294577397a34276e5d869404b5c5cc550d5f3e84a44f230beb2db970031ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1f294577397a34276e5d869404b5c5cc550d5f3e84a44f230beb2db970031ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:43:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:43:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T17:43:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e1f294577397a34276e5d869404b5c5cc550d5f3e84a44f230beb2db970031ec","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e1f294577397a34276e5d869404b5c5cc550d5f3e84a44f230beb2db970031ec\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T17:43:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1f294577397a34276e5d869404b5c5cc550d5f3e84a44f230beb2db970031ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:43:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1f294577397a34276e5d869404b5c5cc550d5f3e84a44f230beb2db970031ec"}
{"level":"debug","ts":"2026-07-07T17:43:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1f294577397a34276e5d869404b5c5cc550d5f3e84a44f230beb2db970031ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:43:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1f294577397a34276e5d869404b5c5cc550d5f3e84a44f230beb2db970031ec"}
{"level":"debug","ts":"2026-07-07T17:43:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1f294577397a34276e5d869404b5c5cc550d5f3e84a44f230beb2db970031ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:43:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:43:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1f294577397a34276e5d869404b5c5cc550d5f3e84a44f230beb2db970031ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1f294577397a34276e5d869404b5c5cc550d5f3e84a44f230beb2db970031ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1f294577397a34276e5d869404b5c5cc550d5f3e84a44f230beb2db970031ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:43:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:43:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1f294577397a34276e5d869404b5c5cc550d5f3e84a44f230beb2db970031ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1f294577397a34276e5d869404b5c5cc550d5f3e84a44f230beb2db970031ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1f294577397a34276e5d869404b5c5cc550d5f3e84a44f230beb2db970031ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:43:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1f294577397a34276e5d869404b5c5cc550d5f3e84a44f230beb2db970031ec"}
{"level":"debug","ts":"2026-07-07T17:43:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1f294577397a34276e5d869404b5c5cc550d5f3e84a44f230beb2db970031ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:43:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1f294577397a34276e5d869404b5c5cc550d5f3e84a44f230beb2db970031ec"}
{"level":"debug","ts":"2026-07-07T17:43:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1f294577397a34276e5d869404b5c5cc550d5f3e84a44f230beb2db970031ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:43:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:43:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1f294577397a34276e5d869404b5c5cc550d5f3e84a44f230beb2db970031ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1f294577397a34276e5d869404b5c5cc550d5f3e84a44f230beb2db970031ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1f294577397a34276e5d869404b5c5cc550d5f3e84a44f230beb2db970031ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:43:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:43:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1f294577397a34276e5d869404b5c5cc550d5f3e84a44f230beb2db970031ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1f294577397a34276e5d869404b5c5cc550d5f3e84a44f230beb2db970031ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:43:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1f294577397a34276e5d869404b5c5cc550d5f3e84a44f230beb2db970031ec"}
{"level":"debug","ts":"2026-07-07T17:43:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1f294577397a34276e5d869404b5c5cc550d5f3e84a44f230beb2db970031ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:43:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1f294577397a34276e5d869404b5c5cc550d5f3e84a44f230beb2db970031ec"}
{"level":"debug","ts":"2026-07-07T17:43:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1f294577397a34276e5d869404b5c5cc550d5f3e84a44f230beb2db970031ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:43:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:43:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1f294577397a34276e5d869404b5c5cc550d5f3e84a44f230beb2db970031ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1f294577397a34276e5d869404b5c5cc550d5f3e84a44f230beb2db970031ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1f294577397a34276e5d869404b5c5cc550d5f3e84a44f230beb2db970031ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:43:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:43:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1f294577397a34276e5d869404b5c5cc550d5f3e84a44f230beb2db970031ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1f294577397a34276e5d869404b5c5cc550d5f3e84a44f230beb2db970031ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:43:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1f294577397a34276e5d869404b5c5cc550d5f3e84a44f230beb2db970031ec"}
{"level":"debug","ts":"2026-07-07T17:43:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1f294577397a34276e5d869404b5c5cc550d5f3e84a44f230beb2db970031ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:43:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1f294577397a34276e5d869404b5c5cc550d5f3e84a44f230beb2db970031ec"}
{"level":"debug","ts":"2026-07-07T17:43:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1f294577397a34276e5d869404b5c5cc550d5f3e84a44f230beb2db970031ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:43:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:43:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1f294577397a34276e5d869404b5c5cc550d5f3e84a44f230beb2db970031ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1f294577397a34276e5d869404b5c5cc550d5f3e84a44f230beb2db970031ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1f294577397a34276e5d869404b5c5cc550d5f3e84a44f230beb2db970031ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1f294577397a34276e5d869404b5c5cc550d5f3e84a44f230beb2db970031ec"}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"011fa5e1af394ea8f05bbdae1b90c88de38862dc4ce354b1ecfb12c249469d6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"011fa5e1af394ea8f05bbdae1b90c88de38862dc4ce354b1ecfb12c249469d6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0f8e20e049197b76ebeac4abe24f913efd1e862a1a1ff6ba439b4ecc04dfe06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/011fa5e1af394ea8f05bbdae1b90c88de38862dc4ce354b1ecfb12c249469d6f"}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0f8e20e049197b76ebeac4abe24f913efd1e862a1a1ff6ba439b4ecc04dfe06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"011fa5e1af394ea8f05bbdae1b90c88de38862dc4ce354b1ecfb12c249469d6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["011fa5e1af394ea8f05bbdae1b90c88de38862dc4ce354b1ecfb12c249469d6f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0f8e20e049197b76ebeac4abe24f913efd1e862a1a1ff6ba439b4ecc04dfe06"}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"011fa5e1af394ea8f05bbdae1b90c88de38862dc4ce354b1ecfb12c249469d6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0f8e20e049197b76ebeac4abe24f913efd1e862a1a1ff6ba439b4ecc04dfe06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0f8e20e049197b76ebeac4abe24f913efd1e862a1a1ff6ba439b4ecc04dfe06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/011fa5e1af394ea8f05bbdae1b90c88de38862dc4ce354b1ecfb12c249469d6f"}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0f8e20e049197b76ebeac4abe24f913efd1e862a1a1ff6ba439b4ecc04dfe06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"011fa5e1af394ea8f05bbdae1b90c88de38862dc4ce354b1ecfb12c249469d6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0f8e20e049197b76ebeac4abe24f913efd1e862a1a1ff6ba439b4ecc04dfe06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0f8e20e049197b76ebeac4abe24f913efd1e862a1a1ff6ba439b4ecc04dfe06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0f8e20e049197b76ebeac4abe24f913efd1e862a1a1ff6ba439b4ecc04dfe06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0f8e20e049197b76ebeac4abe24f913efd1e862a1a1ff6ba439b4ecc04dfe06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e642bff564a8a038bdddf2d0135275624e7ffb4ec570799fb017f3c1fc1f491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0f8e20e049197b76ebeac4abe24f913efd1e862a1a1ff6ba439b4ecc04dfe06"}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e642bff564a8a038bdddf2d0135275624e7ffb4ec570799fb017f3c1fc1f491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e642bff564a8a038bdddf2d0135275624e7ffb4ec570799fb017f3c1fc1f491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0f8e20e049197b76ebeac4abe24f913efd1e862a1a1ff6ba439b4ecc04dfe06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0f8e20e049197b76ebeac4abe24f913efd1e862a1a1ff6ba439b4ecc04dfe06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0f8e20e049197b76ebeac4abe24f913efd1e862a1a1ff6ba439b4ecc04dfe06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e642bff564a8a038bdddf2d0135275624e7ffb4ec570799fb017f3c1fc1f491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0f8e20e049197b76ebeac4abe24f913efd1e862a1a1ff6ba439b4ecc04dfe06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/011fa5e1af394ea8f05bbdae1b90c88de38862dc4ce354b1ecfb12c249469d6f"}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e642bff564a8a038bdddf2d0135275624e7ffb4ec570799fb017f3c1fc1f491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e642bff564a8a038bdddf2d0135275624e7ffb4ec570799fb017f3c1fc1f491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e642bff564a8a038bdddf2d0135275624e7ffb4ec570799fb017f3c1fc1f491","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e642bff564a8a038bdddf2d0135275624e7ffb4ec570799fb017f3c1fc1f491"}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0f8e20e049197b76ebeac4abe24f913efd1e862a1a1ff6ba439b4ecc04dfe06"}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86d92ea941495ba23e0743303ffd07e32188c7eec7ce21d8939a5447d2deed4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86d92ea941495ba23e0743303ffd07e32188c7eec7ce21d8939a5447d2deed4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e642bff564a8a038bdddf2d0135275624e7ffb4ec570799fb017f3c1fc1f491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86d92ea941495ba23e0743303ffd07e32188c7eec7ce21d8939a5447d2deed4a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e642bff564a8a038bdddf2d0135275624e7ffb4ec570799fb017f3c1fc1f491"}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86d92ea941495ba23e0743303ffd07e32188c7eec7ce21d8939a5447d2deed4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86d92ea941495ba23e0743303ffd07e32188c7eec7ce21d8939a5447d2deed4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86d92ea941495ba23e0743303ffd07e32188c7eec7ce21d8939a5447d2deed4a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86d92ea941495ba23e0743303ffd07e32188c7eec7ce21d8939a5447d2deed4a"}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86d92ea941495ba23e0743303ffd07e32188c7eec7ce21d8939a5447d2deed4a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86d92ea941495ba23e0743303ffd07e32188c7eec7ce21d8939a5447d2deed4a"}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e27fac879805007c6622b23570ce787b05fab8c13adf17edd4cf3752f846c0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e27fac879805007c6622b23570ce787b05fab8c13adf17edd4cf3752f846c0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e27fac879805007c6622b23570ce787b05fab8c13adf17edd4cf3752f846c0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e27fac879805007c6622b23570ce787b05fab8c13adf17edd4cf3752f846c0a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e27fac879805007c6622b23570ce787b05fab8c13adf17edd4cf3752f846c0a"}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e27fac879805007c6622b23570ce787b05fab8c13adf17edd4cf3752f846c0a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e27fac879805007c6622b23570ce787b05fab8c13adf17edd4cf3752f846c0a"}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86d92ea941495ba23e0743303ffd07e32188c7eec7ce21d8939a5447d2deed4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86d92ea941495ba23e0743303ffd07e32188c7eec7ce21d8939a5447d2deed4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86d92ea941495ba23e0743303ffd07e32188c7eec7ce21d8939a5447d2deed4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86d92ea941495ba23e0743303ffd07e32188c7eec7ce21d8939a5447d2deed4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e642bff564a8a038bdddf2d0135275624e7ffb4ec570799fb017f3c1fc1f491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e642bff564a8a038bdddf2d0135275624e7ffb4ec570799fb017f3c1fc1f491"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86d92ea941495ba23e0743303ffd07e32188c7eec7ce21d8939a5447d2deed4a"}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e642bff564a8a038bdddf2d0135275624e7ffb4ec570799fb017f3c1fc1f491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e27fac879805007c6622b23570ce787b05fab8c13adf17edd4cf3752f846c0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e27fac879805007c6622b23570ce787b05fab8c13adf17edd4cf3752f846c0a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e27fac879805007c6622b23570ce787b05fab8c13adf17edd4cf3752f846c0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e642bff564a8a038bdddf2d0135275624e7ffb4ec570799fb017f3c1fc1f491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e642bff564a8a038bdddf2d0135275624e7ffb4ec570799fb017f3c1fc1f491"}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e642bff564a8a038bdddf2d0135275624e7ffb4ec570799fb017f3c1fc1f491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00760d4002d15857a8c7f9f5289c07006c221ca2d0077384071333e4894d149c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00760d4002d15857a8c7f9f5289c07006c221ca2d0077384071333e4894d149c"}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00760d4002d15857a8c7f9f5289c07006c221ca2d0077384071333e4894d149c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e27fac879805007c6622b23570ce787b05fab8c13adf17edd4cf3752f846c0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e27fac879805007c6622b23570ce787b05fab8c13adf17edd4cf3752f846c0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e642bff564a8a038bdddf2d0135275624e7ffb4ec570799fb017f3c1fc1f491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e642bff564a8a038bdddf2d0135275624e7ffb4ec570799fb017f3c1fc1f491"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e27fac879805007c6622b23570ce787b05fab8c13adf17edd4cf3752f846c0a"}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e642bff564a8a038bdddf2d0135275624e7ffb4ec570799fb017f3c1fc1f491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00760d4002d15857a8c7f9f5289c07006c221ca2d0077384071333e4894d149c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00760d4002d15857a8c7f9f5289c07006c221ca2d0077384071333e4894d149c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e642bff564a8a038bdddf2d0135275624e7ffb4ec570799fb017f3c1fc1f491"}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00760d4002d15857a8c7f9f5289c07006c221ca2d0077384071333e4894d149c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e27fac879805007c6622b23570ce787b05fab8c13adf17edd4cf3752f846c0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e27fac879805007c6622b23570ce787b05fab8c13adf17edd4cf3752f846c0a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e27fac879805007c6622b23570ce787b05fab8c13adf17edd4cf3752f846c0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e642bff564a8a038bdddf2d0135275624e7ffb4ec570799fb017f3c1fc1f491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00760d4002d15857a8c7f9f5289c07006c221ca2d0077384071333e4894d149c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00760d4002d15857a8c7f9f5289c07006c221ca2d0077384071333e4894d149c"}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00760d4002d15857a8c7f9f5289c07006c221ca2d0077384071333e4894d149c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71393a6dc8f7374874fb4165cc496f519f83f834f3b76a1e561592bfd548806c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e27fac879805007c6622b23570ce787b05fab8c13adf17edd4cf3752f846c0a"}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71393a6dc8f7374874fb4165cc496f519f83f834f3b76a1e561592bfd548806c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e27fac879805007c6622b23570ce787b05fab8c13adf17edd4cf3752f846c0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b25200f7199e1d5fb6de3f1ab06b67dc4edffb6e9cc8dec0d51d8233bd3e01c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b25200f7199e1d5fb6de3f1ab06b67dc4edffb6e9cc8dec0d51d8233bd3e01c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00760d4002d15857a8c7f9f5289c07006c221ca2d0077384071333e4894d149c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00760d4002d15857a8c7f9f5289c07006c221ca2d0077384071333e4894d149c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e642bff564a8a038bdddf2d0135275624e7ffb4ec570799fb017f3c1fc1f491"}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00760d4002d15857a8c7f9f5289c07006c221ca2d0077384071333e4894d149c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71393a6dc8f7374874fb4165cc496f519f83f834f3b76a1e561592bfd548806c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71393a6dc8f7374874fb4165cc496f519f83f834f3b76a1e561592bfd548806c"}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71393a6dc8f7374874fb4165cc496f519f83f834f3b76a1e561592bfd548806c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b25200f7199e1d5fb6de3f1ab06b67dc4edffb6e9cc8dec0d51d8233bd3e01c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00760d4002d15857a8c7f9f5289c07006c221ca2d0077384071333e4894d149c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00760d4002d15857a8c7f9f5289c07006c221ca2d0077384071333e4894d149c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71393a6dc8f7374874fb4165cc496f519f83f834f3b76a1e561592bfd548806c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71393a6dc8f7374874fb4165cc496f519f83f834f3b76a1e561592bfd548806c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00760d4002d15857a8c7f9f5289c07006c221ca2d0077384071333e4894d149c"}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71393a6dc8f7374874fb4165cc496f519f83f834f3b76a1e561592bfd548806c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b25200f7199e1d5fb6de3f1ab06b67dc4edffb6e9cc8dec0d51d8233bd3e01c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b25200f7199e1d5fb6de3f1ab06b67dc4edffb6e9cc8dec0d51d8233bd3e01c7"}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b25200f7199e1d5fb6de3f1ab06b67dc4edffb6e9cc8dec0d51d8233bd3e01c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00760d4002d15857a8c7f9f5289c07006c221ca2d0077384071333e4894d149c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00760d4002d15857a8c7f9f5289c07006c221ca2d0077384071333e4894d149c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00760d4002d15857a8c7f9f5289c07006c221ca2d0077384071333e4894d149c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8183131e4c6403f17476eecd1b30529008fca0870f9f52ec2f45a69d53496e5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e27fac879805007c6622b23570ce787b05fab8c13adf17edd4cf3752f846c0a"}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8183131e4c6403f17476eecd1b30529008fca0870f9f52ec2f45a69d53496e5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71393a6dc8f7374874fb4165cc496f519f83f834f3b76a1e561592bfd548806c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71393a6dc8f7374874fb4165cc496f519f83f834f3b76a1e561592bfd548806c"}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71393a6dc8f7374874fb4165cc496f519f83f834f3b76a1e561592bfd548806c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee5c8259cb0c30598dbdb5dc2df20f5a44ba138c5da30bfe6cabf955e681707d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00760d4002d15857a8c7f9f5289c07006c221ca2d0077384071333e4894d149c"}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee5c8259cb0c30598dbdb5dc2df20f5a44ba138c5da30bfe6cabf955e681707d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b25200f7199e1d5fb6de3f1ab06b67dc4edffb6e9cc8dec0d51d8233bd3e01c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b25200f7199e1d5fb6de3f1ab06b67dc4edffb6e9cc8dec0d51d8233bd3e01c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b25200f7199e1d5fb6de3f1ab06b67dc4edffb6e9cc8dec0d51d8233bd3e01c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00760d4002d15857a8c7f9f5289c07006c221ca2d0077384071333e4894d149c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8183131e4c6403f17476eecd1b30529008fca0870f9f52ec2f45a69d53496e5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8183131e4c6403f17476eecd1b30529008fca0870f9f52ec2f45a69d53496e5a"}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8183131e4c6403f17476eecd1b30529008fca0870f9f52ec2f45a69d53496e5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71393a6dc8f7374874fb4165cc496f519f83f834f3b76a1e561592bfd548806c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71393a6dc8f7374874fb4165cc496f519f83f834f3b76a1e561592bfd548806c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee5c8259cb0c30598dbdb5dc2df20f5a44ba138c5da30bfe6cabf955e681707d"}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71393a6dc8f7374874fb4165cc496f519f83f834f3b76a1e561592bfd548806c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee5c8259cb0c30598dbdb5dc2df20f5a44ba138c5da30bfe6cabf955e681707d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee5c8259cb0c30598dbdb5dc2df20f5a44ba138c5da30bfe6cabf955e681707d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee5c8259cb0c30598dbdb5dc2df20f5a44ba138c5da30bfe6cabf955e681707d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb2725c593aabe88f8a9d460528c5287c8007c237cba7037ec0c4a0f6b3b5077","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b25200f7199e1d5fb6de3f1ab06b67dc4edffb6e9cc8dec0d51d8233bd3e01c7"}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb2725c593aabe88f8a9d460528c5287c8007c237cba7037ec0c4a0f6b3b5077","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b25200f7199e1d5fb6de3f1ab06b67dc4edffb6e9cc8dec0d51d8233bd3e01c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8183131e4c6403f17476eecd1b30529008fca0870f9f52ec2f45a69d53496e5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8183131e4c6403f17476eecd1b30529008fca0870f9f52ec2f45a69d53496e5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71393a6dc8f7374874fb4165cc496f519f83f834f3b76a1e561592bfd548806c"}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8183131e4c6403f17476eecd1b30529008fca0870f9f52ec2f45a69d53496e5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71393a6dc8f7374874fb4165cc496f519f83f834f3b76a1e561592bfd548806c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee5c8259cb0c30598dbdb5dc2df20f5a44ba138c5da30bfe6cabf955e681707d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb2725c593aabe88f8a9d460528c5287c8007c237cba7037ec0c4a0f6b3b5077","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb2725c593aabe88f8a9d460528c5287c8007c237cba7037ec0c4a0f6b3b5077","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8183131e4c6403f17476eecd1b30529008fca0870f9f52ec2f45a69d53496e5a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb2725c593aabe88f8a9d460528c5287c8007c237cba7037ec0c4a0f6b3b5077"}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb2725c593aabe88f8a9d460528c5287c8007c237cba7037ec0c4a0f6b3b5077","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb2725c593aabe88f8a9d460528c5287c8007c237cba7037ec0c4a0f6b3b5077"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb2725c593aabe88f8a9d460528c5287c8007c237cba7037ec0c4a0f6b3b5077","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb2725c593aabe88f8a9d460528c5287c8007c237cba7037ec0c4a0f6b3b5077","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:43:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb2725c593aabe88f8a9d460528c5287c8007c237cba7037ec0c4a0f6b3b5077"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8183131e4c6403f17476eecd1b30529008fca0870f9f52ec2f45a69d53496e5a"}
{"level":"error","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cb2725c593aabe88f8a9d460528c5287c8007c237cba7037ec0c4a0f6b3b5077","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cb2725c593aabe88f8a9d460528c5287c8007c237cba7037ec0c4a0f6b3b5077\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb2725c593aabe88f8a9d460528c5287c8007c237cba7037ec0c4a0f6b3b5077","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb2725c593aabe88f8a9d460528c5287c8007c237cba7037ec0c4a0f6b3b5077","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee5c8259cb0c30598dbdb5dc2df20f5a44ba138c5da30bfe6cabf955e681707d"}
{"level":"info","ts":"2026-07-07T17:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb2725c593aabe88f8a9d460528c5287c8007c237cba7037ec0c4a0f6b3b5077"}
{"level":"info","ts":"2026-07-07T17:43:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f142d862-2481-4994-9d51-e1b477f51a56","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:38492","PortSpecifier":{"PortValue":38492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f142d862-2481-4994-9d51-e1b477f51a56","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T17:43:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f142d862-2481-4994-9d51-e1b477f51a56","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:38492","PortSpecifier":{"PortValue":38492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783446206,"nanos":839760310},"http":{"id":"f142d862-2481-4994-9d51-e1b477f51a56","method":"POST","headers":{":authority":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:43:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f142d862-2481-4994-9d51-e1b477f51a56","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T17:43:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f142d862-2481-4994-9d51-e1b477f51a56","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fe2d1374-3506-4595-ba2a-c54968aa7ca0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=837fe462-1f38-4836-a7b2-ac69beffdf31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c26313fcaa60"]}}
{"level":"debug","ts":"2026-07-07T17:43:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f142d862-2481-4994-9d51-e1b477f51a56","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c26313fcaa60"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=837fe462-1f38-4836-a7b2-ac69beffdf31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fe2d1374-3506-4595-ba2a-c54968aa7ca0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ce6a24861f2e3d59dfe44943df9ca381d708e599247246eba240175ee5c6ffb0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:43:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f142d862-2481-4994-9d51-e1b477f51a56","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:43:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f142d862-2481-4994-9d51-e1b477f51a56","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:43:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f142d862-2481-4994-9d51-e1b477f51a56","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-19c9b1/auth-test-model-19c9b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:43:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f142d862-2481-4994-9d51-e1b477f51a56","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T17:43:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f142d862-2481-4994-9d51-e1b477f51a56","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T17:43:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f142d862-2481-4994-9d51-e1b477f51a56","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T17:43:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f142d862-2481-4994-9d51-e1b477f51a56","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T17:43:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f142d862-2481-4994-9d51-e1b477f51a56","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T17:43:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ab2e4c95-9309-48e8-bcd2-9345d00f8c28","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:56012","PortSpecifier":{"PortValue":56012}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ab2e4c95-9309-48e8-bcd2-9345d00f8c28","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ce87c9.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T17:43:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ab2e4c95-9309-48e8-bcd2-9345d00f8c28","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:56012","PortSpecifier":{"PortValue":56012}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783446206,"nanos":902423723},"http":{"id":"ab2e4c95-9309-48e8-bcd2-9345d00f8c28","method":"POST","headers":{":authority":"e2e-shared-b-ce87c9.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:43:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ab2e4c95-9309-48e8-bcd2-9345d00f8c28","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T17:43:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ab2e4c95-9309-48e8-bcd2-9345d00f8c28","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fe2d1374-3506-4595-ba2a-c54968aa7ca0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=837fe462-1f38-4836-a7b2-ac69beffdf31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c26313fcaa60"]}}
{"level":"debug","ts":"2026-07-07T17:43:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ab2e4c95-9309-48e8-bcd2-9345d00f8c28","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c26313fcaa60"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=837fe462-1f38-4836-a7b2-ac69beffdf31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fe2d1374-3506-4595-ba2a-c54968aa7ca0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e0f8e20e049197b76ebeac4abe24f913efd1e862a1a1ff6ba439b4ecc04dfe06"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ce87c9.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:43:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab2e4c95-9309-48e8-bcd2-9345d00f8c28","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:43:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab2e4c95-9309-48e8-bcd2-9345d00f8c28","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:43:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab2e4c95-9309-48e8-bcd2-9345d00f8c28","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ce87c9/auth-test-model-ce87c9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:43:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ab2e4c95-9309-48e8-bcd2-9345d00f8c28","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T17:43:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab2e4c95-9309-48e8-bcd2-9345d00f8c28","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T17:43:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab2e4c95-9309-48e8-bcd2-9345d00f8c28","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T17:43:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ab2e4c95-9309-48e8-bcd2-9345d00f8c28","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T17:43:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ab2e4c95-9309-48e8-bcd2-9345d00f8c28","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T17:43:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"487b5c25-0a14-44a9-8f86-3ef489b83a56","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:38498","PortSpecifier":{"PortValue":38498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"487b5c25-0a14-44a9-8f86-3ef489b83a56","method":"GET","path":"/maas-api/v1/api-keys/1f7f4f7d-4b96-495e-8349-6d2de18f018d","host":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T17:43:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"487b5c25-0a14-44a9-8f86-3ef489b83a56","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:38498","PortSpecifier":{"PortValue":38498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783446206,"nanos":995431184},"http":{"id":"487b5c25-0a14-44a9-8f86-3ef489b83a56","method":"GET","headers":{":authority":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/1f7f4f7d-4b96-495e-8349-6d2de18f018d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:43:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"487b5c25-0a14-44a9-8f86-3ef489b83a56","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T17:43:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"487b5c25-0a14-44a9-8f86-3ef489b83a56","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fe2d1374-3506-4595-ba2a-c54968aa7ca0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=837fe462-1f38-4836-a7b2-ac69beffdf31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c26313fcaa60"]}}
{"level":"debug","ts":"2026-07-07T17:43:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"487b5c25-0a14-44a9-8f86-3ef489b83a56","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c26313fcaa60"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=837fe462-1f38-4836-a7b2-ac69beffdf31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fe2d1374-3506-4595-ba2a-c54968aa7ca0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ce6a24861f2e3d59dfe44943df9ca381d708e599247246eba240175ee5c6ffb0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/1f7f4f7d-4b96-495e-8349-6d2de18f018d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:43:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"487b5c25-0a14-44a9-8f86-3ef489b83a56","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:43:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"487b5c25-0a14-44a9-8f86-3ef489b83a56","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:43:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"487b5c25-0a14-44a9-8f86-3ef489b83a56","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-19c9b1/auth-test-model-19c9b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:43:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"487b5c25-0a14-44a9-8f86-3ef489b83a56","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T17:43:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"487b5c25-0a14-44a9-8f86-3ef489b83a56","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T17:43:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"487b5c25-0a14-44a9-8f86-3ef489b83a56","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T17:43:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"487b5c25-0a14-44a9-8f86-3ef489b83a56","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T17:43:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"487b5c25-0a14-44a9-8f86-3ef489b83a56","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T17:43:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"253f4a30-f2c2-42b7-8a5a-ad2422385387","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:56028","PortSpecifier":{"PortValue":56028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"253f4a30-f2c2-42b7-8a5a-ad2422385387","method":"GET","path":"/maas-api/v1/api-keys/503c3a05-07c6-4e30-a99a-6abb11451a68","host":"e2e-shared-b-ce87c9.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T17:43:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"253f4a30-f2c2-42b7-8a5a-ad2422385387","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:56028","PortSpecifier":{"PortValue":56028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783446207,"nanos":36155489},"http":{"id":"253f4a30-f2c2-42b7-8a5a-ad2422385387","method":"GET","headers":{":authority":"e2e-shared-b-ce87c9.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/503c3a05-07c6-4e30-a99a-6abb11451a68",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:43:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"253f4a30-f2c2-42b7-8a5a-ad2422385387","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T17:43:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"253f4a30-f2c2-42b7-8a5a-ad2422385387","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fe2d1374-3506-4595-ba2a-c54968aa7ca0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=837fe462-1f38-4836-a7b2-ac69beffdf31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c26313fcaa60"]}}
{"level":"debug","ts":"2026-07-07T17:43:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"253f4a30-f2c2-42b7-8a5a-ad2422385387","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c26313fcaa60"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=837fe462-1f38-4836-a7b2-ac69beffdf31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fe2d1374-3506-4595-ba2a-c54968aa7ca0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e0f8e20e049197b76ebeac4abe24f913efd1e862a1a1ff6ba439b4ecc04dfe06"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ce87c9.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/503c3a05-07c6-4e30-a99a-6abb11451a68",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:43:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"253f4a30-f2c2-42b7-8a5a-ad2422385387","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:43:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"253f4a30-f2c2-42b7-8a5a-ad2422385387","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:43:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"253f4a30-f2c2-42b7-8a5a-ad2422385387","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ce87c9/auth-test-model-ce87c9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:43:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"253f4a30-f2c2-42b7-8a5a-ad2422385387","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T17:43:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"253f4a30-f2c2-42b7-8a5a-ad2422385387","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T17:43:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"253f4a30-f2c2-42b7-8a5a-ad2422385387","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T17:43:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"253f4a30-f2c2-42b7-8a5a-ad2422385387","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T17:43:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"253f4a30-f2c2-42b7-8a5a-ad2422385387","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T17:43:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc0241eb-68bf-4070-b189-4a4b227b95bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:53400","PortSpecifier":{"PortValue":53400}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bc0241eb-68bf-4070-b189-4a4b227b95bb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T17:43:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc0241eb-68bf-4070-b189-4a4b227b95bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:53400","PortSpecifier":{"PortValue":53400}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783446226,"nanos":751294463},"http":{"id":"bc0241eb-68bf-4070-b189-4a4b227b95bb","method":"POST","headers":{":authority":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:43:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bc0241eb-68bf-4070-b189-4a4b227b95bb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T17:43:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bc0241eb-68bf-4070-b189-4a4b227b95bb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fe2d1374-3506-4595-ba2a-c54968aa7ca0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=837fe462-1f38-4836-a7b2-ac69beffdf31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c26313fcaa60"]}}
{"level":"debug","ts":"2026-07-07T17:43:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bc0241eb-68bf-4070-b189-4a4b227b95bb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c26313fcaa60"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=837fe462-1f38-4836-a7b2-ac69beffdf31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fe2d1374-3506-4595-ba2a-c54968aa7ca0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ce6a24861f2e3d59dfe44943df9ca381d708e599247246eba240175ee5c6ffb0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:43:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc0241eb-68bf-4070-b189-4a4b227b95bb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:43:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc0241eb-68bf-4070-b189-4a4b227b95bb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:43:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc0241eb-68bf-4070-b189-4a4b227b95bb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-19c9b1/auth-test-model-19c9b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:43:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bc0241eb-68bf-4070-b189-4a4b227b95bb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T17:43:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc0241eb-68bf-4070-b189-4a4b227b95bb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T17:43:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc0241eb-68bf-4070-b189-4a4b227b95bb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T17:43:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc0241eb-68bf-4070-b189-4a4b227b95bb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T17:43:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc0241eb-68bf-4070-b189-4a4b227b95bb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T17:43:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bd459318-8adc-468e-9a2f-670b13a12df8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:47102","PortSpecifier":{"PortValue":47102}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bd459318-8adc-468e-9a2f-670b13a12df8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ce87c9.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T17:43:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bd459318-8adc-468e-9a2f-670b13a12df8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:47102","PortSpecifier":{"PortValue":47102}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783446226,"nanos":797799640},"http":{"id":"bd459318-8adc-468e-9a2f-670b13a12df8","method":"POST","headers":{":authority":"e2e-shared-b-ce87c9.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:43:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bd459318-8adc-468e-9a2f-670b13a12df8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T17:43:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bd459318-8adc-468e-9a2f-670b13a12df8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fe2d1374-3506-4595-ba2a-c54968aa7ca0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=837fe462-1f38-4836-a7b2-ac69beffdf31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c26313fcaa60"]}}
{"level":"debug","ts":"2026-07-07T17:43:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bd459318-8adc-468e-9a2f-670b13a12df8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c26313fcaa60"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=837fe462-1f38-4836-a7b2-ac69beffdf31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fe2d1374-3506-4595-ba2a-c54968aa7ca0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e0f8e20e049197b76ebeac4abe24f913efd1e862a1a1ff6ba439b4ecc04dfe06"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ce87c9.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:43:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd459318-8adc-468e-9a2f-670b13a12df8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:43:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd459318-8adc-468e-9a2f-670b13a12df8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:43:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd459318-8adc-468e-9a2f-670b13a12df8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ce87c9/auth-test-model-ce87c9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:43:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bd459318-8adc-468e-9a2f-670b13a12df8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T17:43:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bd459318-8adc-468e-9a2f-670b13a12df8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T17:43:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bd459318-8adc-468e-9a2f-670b13a12df8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T17:43:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bd459318-8adc-468e-9a2f-670b13a12df8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T17:43:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bd459318-8adc-468e-9a2f-670b13a12df8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T17:43:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"742a0b8b-dba9-4244-bdf4-d471c58fa21d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:53408","PortSpecifier":{"PortValue":53408}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"742a0b8b-dba9-4244-bdf4-d471c58fa21d","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T17:43:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"742a0b8b-dba9-4244-bdf4-d471c58fa21d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:53408","PortSpecifier":{"PortValue":53408}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783446226,"nanos":841127424},"http":{"id":"742a0b8b-dba9-4244-bdf4-d471c58fa21d","method":"GET","headers":{":authority":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:43:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"742a0b8b-dba9-4244-bdf4-d471c58fa21d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-R8Fu2NDAc1Sbkr2B_YCnOCs8Ap7f9jplkIxZ9FS6o1456PhFvxg0dbD4pD5D"}
{"level":"debug","ts":"2026-07-07T17:43:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"742a0b8b-dba9-4244-bdf4-d471c58fa21d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-R8Fu2NDAc1Sbkr2B_YCnOCs8Ap7f9jplkIxZ9FS6o1456PhFvxg0dbD4pD5D\"}"}
{"level":"debug","ts":"2026-07-07T17:43:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"742a0b8b-dba9-4244-bdf4-d471c58fa21d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b4849832-1cf8-4217-b277-0a6b8f720847","keyName":"e2e-auth-iso-a-8325f1","subscription":"e2e-auth-iso-10f7b6","tenant":"e2e-shared-a-19c9b1","userId":"b4849832-1cf8-4217-b277-0a6b8f720847","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T17:43:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"742a0b8b-dba9-4244-bdf4-d471c58fa21d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:43:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"742a0b8b-dba9-4244-bdf4-d471c58fa21d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:43:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"742a0b8b-dba9-4244-bdf4-d471c58fa21d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:43:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"742a0b8b-dba9-4244-bdf4-d471c58fa21d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-19c9b1/auth-test-model-19c9b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:43:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"742a0b8b-dba9-4244-bdf4-d471c58fa21d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T17:43:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"742a0b8b-dba9-4244-bdf4-d471c58fa21d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T17:43:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"742a0b8b-dba9-4244-bdf4-d471c58fa21d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-10f7b6"}
{"level":"debug","ts":"2026-07-07T17:43:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"742a0b8b-dba9-4244-bdf4-d471c58fa21d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-07T17:43:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"742a0b8b-dba9-4244-bdf4-d471c58fa21d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T17:43:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"742a0b8b-dba9-4244-bdf4-d471c58fa21d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T17:44:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32b481fa-fc4e-4cf6-b33a-6585d9ba8ffe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:44312","PortSpecifier":{"PortValue":44312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"32b481fa-fc4e-4cf6-b33a-6585d9ba8ffe","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T17:44:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32b481fa-fc4e-4cf6-b33a-6585d9ba8ffe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:44312","PortSpecifier":{"PortValue":44312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783446246,"nanos":474086397},"http":{"id":"32b481fa-fc4e-4cf6-b33a-6585d9ba8ffe","method":"POST","headers":{":authority":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:44:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"32b481fa-fc4e-4cf6-b33a-6585d9ba8ffe","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T17:44:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"32b481fa-fc4e-4cf6-b33a-6585d9ba8ffe","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fe2d1374-3506-4595-ba2a-c54968aa7ca0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=837fe462-1f38-4836-a7b2-ac69beffdf31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c26313fcaa60"]}}
{"level":"debug","ts":"2026-07-07T17:44:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"32b481fa-fc4e-4cf6-b33a-6585d9ba8ffe","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c26313fcaa60"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=837fe462-1f38-4836-a7b2-ac69beffdf31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fe2d1374-3506-4595-ba2a-c54968aa7ca0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ce6a24861f2e3d59dfe44943df9ca381d708e599247246eba240175ee5c6ffb0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:44:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32b481fa-fc4e-4cf6-b33a-6585d9ba8ffe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:44:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32b481fa-fc4e-4cf6-b33a-6585d9ba8ffe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:44:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32b481fa-fc4e-4cf6-b33a-6585d9ba8ffe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-19c9b1/auth-test-model-19c9b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:44:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"32b481fa-fc4e-4cf6-b33a-6585d9ba8ffe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T17:44:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32b481fa-fc4e-4cf6-b33a-6585d9ba8ffe","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T17:44:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32b481fa-fc4e-4cf6-b33a-6585d9ba8ffe","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T17:44:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32b481fa-fc4e-4cf6-b33a-6585d9ba8ffe","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T17:44:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32b481fa-fc4e-4cf6-b33a-6585d9ba8ffe","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T17:44:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42b3d153-84d1-4274-83e8-6ac0ca4d7930","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:41476","PortSpecifier":{"PortValue":41476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"42b3d153-84d1-4274-83e8-6ac0ca4d7930","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ce87c9.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T17:44:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42b3d153-84d1-4274-83e8-6ac0ca4d7930","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:41476","PortSpecifier":{"PortValue":41476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783446246,"nanos":517425331},"http":{"id":"42b3d153-84d1-4274-83e8-6ac0ca4d7930","method":"POST","headers":{":authority":"e2e-shared-b-ce87c9.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:44:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"42b3d153-84d1-4274-83e8-6ac0ca4d7930","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T17:44:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"42b3d153-84d1-4274-83e8-6ac0ca4d7930","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fe2d1374-3506-4595-ba2a-c54968aa7ca0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=837fe462-1f38-4836-a7b2-ac69beffdf31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c26313fcaa60"]}}
{"level":"debug","ts":"2026-07-07T17:44:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"42b3d153-84d1-4274-83e8-6ac0ca4d7930","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c26313fcaa60"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=837fe462-1f38-4836-a7b2-ac69beffdf31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fe2d1374-3506-4595-ba2a-c54968aa7ca0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e0f8e20e049197b76ebeac4abe24f913efd1e862a1a1ff6ba439b4ecc04dfe06"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ce87c9.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:44:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42b3d153-84d1-4274-83e8-6ac0ca4d7930","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:44:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42b3d153-84d1-4274-83e8-6ac0ca4d7930","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:44:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42b3d153-84d1-4274-83e8-6ac0ca4d7930","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ce87c9/auth-test-model-ce87c9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:44:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"42b3d153-84d1-4274-83e8-6ac0ca4d7930","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T17:44:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42b3d153-84d1-4274-83e8-6ac0ca4d7930","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T17:44:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42b3d153-84d1-4274-83e8-6ac0ca4d7930","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T17:44:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42b3d153-84d1-4274-83e8-6ac0ca4d7930","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T17:44:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42b3d153-84d1-4274-83e8-6ac0ca4d7930","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T17:44:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bd659939-ef40-42b1-91b7-65edbabbdb5e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:41486","PortSpecifier":{"PortValue":41486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bd659939-ef40-42b1-91b7-65edbabbdb5e","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-ce87c9.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T17:44:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bd659939-ef40-42b1-91b7-65edbabbdb5e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:41486","PortSpecifier":{"PortValue":41486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783446246,"nanos":561174147},"http":{"id":"bd659939-ef40-42b1-91b7-65edbabbdb5e","method":"GET","headers":{":authority":"e2e-shared-b-ce87c9.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:44:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bd659939-ef40-42b1-91b7-65edbabbdb5e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-10nhdY4vcyqzP0Tw6_37Pe9OVt9Pge2qLrkO1dpdRGHBFmXzQVcvUrExQnD1m"}
{"level":"debug","ts":"2026-07-07T17:44:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bd659939-ef40-42b1-91b7-65edbabbdb5e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-ce87c9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-10nhdY4vcyqzP0Tw6_37Pe9OVt9Pge2qLrkO1dpdRGHBFmXzQVcvUrExQnD1m\"}"}
{"level":"debug","ts":"2026-07-07T17:44:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bd659939-ef40-42b1-91b7-65edbabbdb5e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-ce87c9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-07T17:44:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bd659939-ef40-42b1-91b7-65edbabbdb5e","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"e0f8e20e049197b76ebeac4abe24f913efd1e862a1a1ff6ba439b4ecc04dfe06"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ce87c9.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:44:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd659939-ef40-42b1-91b7-65edbabbdb5e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:44:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"bd659939-ef40-42b1-91b7-65edbabbdb5e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-07T17:44:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bd659939-ef40-42b1-91b7-65edbabbdb5e","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-07T17:44:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bd659939-ef40-42b1-91b7-65edbabbdb5e","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-07T17:44:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d71afed-8437-4bad-8dab-430102dae8e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:45702","PortSpecifier":{"PortValue":45702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0d71afed-8437-4bad-8dab-430102dae8e4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T17:44:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d71afed-8437-4bad-8dab-430102dae8e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:45702","PortSpecifier":{"PortValue":45702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783446263,"nanos":949923171},"http":{"id":"0d71afed-8437-4bad-8dab-430102dae8e4","method":"POST","headers":{":authority":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:44:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0d71afed-8437-4bad-8dab-430102dae8e4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T17:44:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0d71afed-8437-4bad-8dab-430102dae8e4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fe2d1374-3506-4595-ba2a-c54968aa7ca0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=837fe462-1f38-4836-a7b2-ac69beffdf31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c26313fcaa60"]}}
{"level":"debug","ts":"2026-07-07T17:44:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0d71afed-8437-4bad-8dab-430102dae8e4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c26313fcaa60"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=837fe462-1f38-4836-a7b2-ac69beffdf31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fe2d1374-3506-4595-ba2a-c54968aa7ca0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ce6a24861f2e3d59dfe44943df9ca381d708e599247246eba240175ee5c6ffb0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:44:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d71afed-8437-4bad-8dab-430102dae8e4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:44:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d71afed-8437-4bad-8dab-430102dae8e4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:44:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d71afed-8437-4bad-8dab-430102dae8e4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-19c9b1/auth-test-model-19c9b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:44:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0d71afed-8437-4bad-8dab-430102dae8e4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T17:44:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d71afed-8437-4bad-8dab-430102dae8e4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T17:44:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d71afed-8437-4bad-8dab-430102dae8e4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T17:44:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d71afed-8437-4bad-8dab-430102dae8e4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T17:44:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d71afed-8437-4bad-8dab-430102dae8e4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T17:44:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"76a565e0-d12f-44a5-92f9-d26b127b36d9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:54020","PortSpecifier":{"PortValue":54020}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"76a565e0-d12f-44a5-92f9-d26b127b36d9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ce87c9.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T17:44:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"76a565e0-d12f-44a5-92f9-d26b127b36d9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:54020","PortSpecifier":{"PortValue":54020}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783446263,"nanos":987891297},"http":{"id":"76a565e0-d12f-44a5-92f9-d26b127b36d9","method":"POST","headers":{":authority":"e2e-shared-b-ce87c9.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:44:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"76a565e0-d12f-44a5-92f9-d26b127b36d9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T17:44:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"76a565e0-d12f-44a5-92f9-d26b127b36d9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fe2d1374-3506-4595-ba2a-c54968aa7ca0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=837fe462-1f38-4836-a7b2-ac69beffdf31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c26313fcaa60"]}}
{"level":"debug","ts":"2026-07-07T17:44:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"76a565e0-d12f-44a5-92f9-d26b127b36d9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c26313fcaa60"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=837fe462-1f38-4836-a7b2-ac69beffdf31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fe2d1374-3506-4595-ba2a-c54968aa7ca0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e0f8e20e049197b76ebeac4abe24f913efd1e862a1a1ff6ba439b4ecc04dfe06"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ce87c9.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:44:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76a565e0-d12f-44a5-92f9-d26b127b36d9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:44:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76a565e0-d12f-44a5-92f9-d26b127b36d9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:44:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76a565e0-d12f-44a5-92f9-d26b127b36d9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ce87c9/auth-test-model-ce87c9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:44:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"76a565e0-d12f-44a5-92f9-d26b127b36d9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T17:44:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76a565e0-d12f-44a5-92f9-d26b127b36d9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T17:44:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76a565e0-d12f-44a5-92f9-d26b127b36d9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T17:44:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"76a565e0-d12f-44a5-92f9-d26b127b36d9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T17:44:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"76a565e0-d12f-44a5-92f9-d26b127b36d9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T17:44:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b7020db-dcc5-4439-b02e-b74a9c4a0c39","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:45706","PortSpecifier":{"PortValue":45706}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3b7020db-dcc5-4439-b02e-b74a9c4a0c39","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T17:44:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b7020db-dcc5-4439-b02e-b74a9c4a0c39","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:45706","PortSpecifier":{"PortValue":45706}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783446264,"nanos":26869538},"http":{"id":"3b7020db-dcc5-4439-b02e-b74a9c4a0c39","method":"POST","headers":{":authority":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:44:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3b7020db-dcc5-4439-b02e-b74a9c4a0c39","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T17:44:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3b7020db-dcc5-4439-b02e-b74a9c4a0c39","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fe2d1374-3506-4595-ba2a-c54968aa7ca0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=837fe462-1f38-4836-a7b2-ac69beffdf31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c26313fcaa60"]}}
{"level":"debug","ts":"2026-07-07T17:44:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3b7020db-dcc5-4439-b02e-b74a9c4a0c39","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c26313fcaa60"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=837fe462-1f38-4836-a7b2-ac69beffdf31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fe2d1374-3506-4595-ba2a-c54968aa7ca0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ce6a24861f2e3d59dfe44943df9ca381d708e599247246eba240175ee5c6ffb0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:44:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b7020db-dcc5-4439-b02e-b74a9c4a0c39","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:44:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b7020db-dcc5-4439-b02e-b74a9c4a0c39","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:44:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b7020db-dcc5-4439-b02e-b74a9c4a0c39","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-19c9b1/auth-test-model-19c9b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:44:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3b7020db-dcc5-4439-b02e-b74a9c4a0c39","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T17:44:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b7020db-dcc5-4439-b02e-b74a9c4a0c39","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T17:44:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b7020db-dcc5-4439-b02e-b74a9c4a0c39","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T17:44:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b7020db-dcc5-4439-b02e-b74a9c4a0c39","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T17:44:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b7020db-dcc5-4439-b02e-b74a9c4a0c39","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T17:44:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8000e00-5e37-4c83-a2b1-87e97470794e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:54022","PortSpecifier":{"PortValue":54022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b8000e00-5e37-4c83-a2b1-87e97470794e","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-ce87c9.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T17:44:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8000e00-5e37-4c83-a2b1-87e97470794e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:54022","PortSpecifier":{"PortValue":54022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783446264,"nanos":63549014},"http":{"id":"b8000e00-5e37-4c83-a2b1-87e97470794e","method":"POST","headers":{":authority":"e2e-shared-b-ce87c9.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:44:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b8000e00-5e37-4c83-a2b1-87e97470794e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T17:44:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b8000e00-5e37-4c83-a2b1-87e97470794e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fe2d1374-3506-4595-ba2a-c54968aa7ca0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=837fe462-1f38-4836-a7b2-ac69beffdf31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c26313fcaa60"]}}
{"level":"debug","ts":"2026-07-07T17:44:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b8000e00-5e37-4c83-a2b1-87e97470794e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c26313fcaa60"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=837fe462-1f38-4836-a7b2-ac69beffdf31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fe2d1374-3506-4595-ba2a-c54968aa7ca0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e0f8e20e049197b76ebeac4abe24f913efd1e862a1a1ff6ba439b4ecc04dfe06"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ce87c9.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:44:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8000e00-5e37-4c83-a2b1-87e97470794e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:44:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8000e00-5e37-4c83-a2b1-87e97470794e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:44:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8000e00-5e37-4c83-a2b1-87e97470794e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ce87c9/auth-test-model-ce87c9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:44:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b8000e00-5e37-4c83-a2b1-87e97470794e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T17:44:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8000e00-5e37-4c83-a2b1-87e97470794e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T17:44:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8000e00-5e37-4c83-a2b1-87e97470794e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T17:44:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8000e00-5e37-4c83-a2b1-87e97470794e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T17:44:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8000e00-5e37-4c83-a2b1-87e97470794e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T17:44:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7fcb152e-129b-44e0-9575-b62caf95ebd3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:50320","PortSpecifier":{"PortValue":50320}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7fcb152e-129b-44e0-9575-b62caf95ebd3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T17:44:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7fcb152e-129b-44e0-9575-b62caf95ebd3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:50320","PortSpecifier":{"PortValue":50320}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783446281,"nanos":441726283},"http":{"id":"7fcb152e-129b-44e0-9575-b62caf95ebd3","method":"POST","headers":{":authority":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:44:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7fcb152e-129b-44e0-9575-b62caf95ebd3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T17:44:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7fcb152e-129b-44e0-9575-b62caf95ebd3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fe2d1374-3506-4595-ba2a-c54968aa7ca0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=837fe462-1f38-4836-a7b2-ac69beffdf31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c26313fcaa60"]}}
{"level":"debug","ts":"2026-07-07T17:44:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7fcb152e-129b-44e0-9575-b62caf95ebd3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c26313fcaa60"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=837fe462-1f38-4836-a7b2-ac69beffdf31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fe2d1374-3506-4595-ba2a-c54968aa7ca0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ce6a24861f2e3d59dfe44943df9ca381d708e599247246eba240175ee5c6ffb0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:44:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fcb152e-129b-44e0-9575-b62caf95ebd3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:44:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fcb152e-129b-44e0-9575-b62caf95ebd3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:44:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fcb152e-129b-44e0-9575-b62caf95ebd3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-19c9b1/auth-test-model-19c9b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:44:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7fcb152e-129b-44e0-9575-b62caf95ebd3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T17:44:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fcb152e-129b-44e0-9575-b62caf95ebd3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T17:44:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fcb152e-129b-44e0-9575-b62caf95ebd3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T17:44:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7fcb152e-129b-44e0-9575-b62caf95ebd3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T17:44:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7fcb152e-129b-44e0-9575-b62caf95ebd3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T17:44:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4fa6b563-56a7-4063-b0e2-68b4d86351d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:58750","PortSpecifier":{"PortValue":58750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4fa6b563-56a7-4063-b0e2-68b4d86351d2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ce87c9.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T17:44:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4fa6b563-56a7-4063-b0e2-68b4d86351d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:58750","PortSpecifier":{"PortValue":58750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783446281,"nanos":487400949},"http":{"id":"4fa6b563-56a7-4063-b0e2-68b4d86351d2","method":"POST","headers":{":authority":"e2e-shared-b-ce87c9.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:44:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4fa6b563-56a7-4063-b0e2-68b4d86351d2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T17:44:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4fa6b563-56a7-4063-b0e2-68b4d86351d2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fe2d1374-3506-4595-ba2a-c54968aa7ca0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=837fe462-1f38-4836-a7b2-ac69beffdf31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c26313fcaa60"]}}
{"level":"debug","ts":"2026-07-07T17:44:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4fa6b563-56a7-4063-b0e2-68b4d86351d2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c26313fcaa60"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=837fe462-1f38-4836-a7b2-ac69beffdf31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fe2d1374-3506-4595-ba2a-c54968aa7ca0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e0f8e20e049197b76ebeac4abe24f913efd1e862a1a1ff6ba439b4ecc04dfe06"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ce87c9.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:44:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4fa6b563-56a7-4063-b0e2-68b4d86351d2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:44:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4fa6b563-56a7-4063-b0e2-68b4d86351d2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:44:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4fa6b563-56a7-4063-b0e2-68b4d86351d2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ce87c9/auth-test-model-ce87c9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:44:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4fa6b563-56a7-4063-b0e2-68b4d86351d2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T17:44:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4fa6b563-56a7-4063-b0e2-68b4d86351d2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T17:44:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4fa6b563-56a7-4063-b0e2-68b4d86351d2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T17:44:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4fa6b563-56a7-4063-b0e2-68b4d86351d2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T17:44:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4fa6b563-56a7-4063-b0e2-68b4d86351d2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T17:44:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3eb46bff-23c3-4b25-ba26-d25bae3dea76","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:58760","PortSpecifier":{"PortValue":58760}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3eb46bff-23c3-4b25-ba26-d25bae3dea76","method":"GET","path":"/maas-api/v1/api-keys/59c99861-ff18-42e8-a3ea-488b7cbaba33","host":"e2e-shared-b-ce87c9.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T17:44:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3eb46bff-23c3-4b25-ba26-d25bae3dea76","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:58760","PortSpecifier":{"PortValue":58760}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783446281,"nanos":530534876},"http":{"id":"3eb46bff-23c3-4b25-ba26-d25bae3dea76","method":"GET","headers":{":authority":"e2e-shared-b-ce87c9.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/59c99861-ff18-42e8-a3ea-488b7cbaba33",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:44:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3eb46bff-23c3-4b25-ba26-d25bae3dea76","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T17:44:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3eb46bff-23c3-4b25-ba26-d25bae3dea76","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fe2d1374-3506-4595-ba2a-c54968aa7ca0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=837fe462-1f38-4836-a7b2-ac69beffdf31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c26313fcaa60"]}}
{"level":"debug","ts":"2026-07-07T17:44:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3eb46bff-23c3-4b25-ba26-d25bae3dea76","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c26313fcaa60"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=837fe462-1f38-4836-a7b2-ac69beffdf31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fe2d1374-3506-4595-ba2a-c54968aa7ca0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e0f8e20e049197b76ebeac4abe24f913efd1e862a1a1ff6ba439b4ecc04dfe06"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ce87c9.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/59c99861-ff18-42e8-a3ea-488b7cbaba33",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:44:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3eb46bff-23c3-4b25-ba26-d25bae3dea76","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:44:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3eb46bff-23c3-4b25-ba26-d25bae3dea76","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:44:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3eb46bff-23c3-4b25-ba26-d25bae3dea76","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ce87c9/auth-test-model-ce87c9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:44:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3eb46bff-23c3-4b25-ba26-d25bae3dea76","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T17:44:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3eb46bff-23c3-4b25-ba26-d25bae3dea76","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T17:44:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3eb46bff-23c3-4b25-ba26-d25bae3dea76","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T17:44:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3eb46bff-23c3-4b25-ba26-d25bae3dea76","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T17:44:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3eb46bff-23c3-4b25-ba26-d25bae3dea76","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T17:44:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21d1ffdb-c494-4177-b904-03f090b01159","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:50324","PortSpecifier":{"PortValue":50324}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"21d1ffdb-c494-4177-b904-03f090b01159","method":"GET","path":"/maas-api/v1/api-keys/59c99861-ff18-42e8-a3ea-488b7cbaba33","host":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T17:44:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21d1ffdb-c494-4177-b904-03f090b01159","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:50324","PortSpecifier":{"PortValue":50324}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783446281,"nanos":565513469},"http":{"id":"21d1ffdb-c494-4177-b904-03f090b01159","method":"GET","headers":{":authority":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/59c99861-ff18-42e8-a3ea-488b7cbaba33",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:44:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"21d1ffdb-c494-4177-b904-03f090b01159","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T17:44:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"21d1ffdb-c494-4177-b904-03f090b01159","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fe2d1374-3506-4595-ba2a-c54968aa7ca0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=837fe462-1f38-4836-a7b2-ac69beffdf31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c26313fcaa60"]}}
{"level":"debug","ts":"2026-07-07T17:44:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"21d1ffdb-c494-4177-b904-03f090b01159","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c26313fcaa60"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=837fe462-1f38-4836-a7b2-ac69beffdf31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fe2d1374-3506-4595-ba2a-c54968aa7ca0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ce6a24861f2e3d59dfe44943df9ca381d708e599247246eba240175ee5c6ffb0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/59c99861-ff18-42e8-a3ea-488b7cbaba33",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:44:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21d1ffdb-c494-4177-b904-03f090b01159","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:44:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21d1ffdb-c494-4177-b904-03f090b01159","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:44:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21d1ffdb-c494-4177-b904-03f090b01159","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-19c9b1/auth-test-model-19c9b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:44:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"21d1ffdb-c494-4177-b904-03f090b01159","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T17:44:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21d1ffdb-c494-4177-b904-03f090b01159","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T17:44:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21d1ffdb-c494-4177-b904-03f090b01159","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T17:44:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21d1ffdb-c494-4177-b904-03f090b01159","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T17:44:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21d1ffdb-c494-4177-b904-03f090b01159","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T17:44:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d890e1d6-6e90-4f9b-9ad0-b060bbe11aec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:46252","PortSpecifier":{"PortValue":46252}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d890e1d6-6e90-4f9b-9ad0-b060bbe11aec","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T17:44:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d890e1d6-6e90-4f9b-9ad0-b060bbe11aec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:46252","PortSpecifier":{"PortValue":46252}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783446298,"nanos":820087752},"http":{"id":"d890e1d6-6e90-4f9b-9ad0-b060bbe11aec","method":"POST","headers":{":authority":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:44:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d890e1d6-6e90-4f9b-9ad0-b060bbe11aec","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T17:44:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d890e1d6-6e90-4f9b-9ad0-b060bbe11aec","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fe2d1374-3506-4595-ba2a-c54968aa7ca0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=837fe462-1f38-4836-a7b2-ac69beffdf31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c26313fcaa60"]}}
{"level":"debug","ts":"2026-07-07T17:44:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d890e1d6-6e90-4f9b-9ad0-b060bbe11aec","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c26313fcaa60"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=837fe462-1f38-4836-a7b2-ac69beffdf31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fe2d1374-3506-4595-ba2a-c54968aa7ca0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ce6a24861f2e3d59dfe44943df9ca381d708e599247246eba240175ee5c6ffb0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:44:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d890e1d6-6e90-4f9b-9ad0-b060bbe11aec","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:44:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d890e1d6-6e90-4f9b-9ad0-b060bbe11aec","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:44:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d890e1d6-6e90-4f9b-9ad0-b060bbe11aec","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-19c9b1/auth-test-model-19c9b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:44:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d890e1d6-6e90-4f9b-9ad0-b060bbe11aec","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T17:44:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d890e1d6-6e90-4f9b-9ad0-b060bbe11aec","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T17:44:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d890e1d6-6e90-4f9b-9ad0-b060bbe11aec","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T17:44:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d890e1d6-6e90-4f9b-9ad0-b060bbe11aec","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T17:44:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d890e1d6-6e90-4f9b-9ad0-b060bbe11aec","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T17:44:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f46511e-e5bd-4b67-a4d6-228ca7fc6bc0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:34190","PortSpecifier":{"PortValue":34190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2f46511e-e5bd-4b67-a4d6-228ca7fc6bc0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ce87c9.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T17:44:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f46511e-e5bd-4b67-a4d6-228ca7fc6bc0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:34190","PortSpecifier":{"PortValue":34190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783446298,"nanos":858447321},"http":{"id":"2f46511e-e5bd-4b67-a4d6-228ca7fc6bc0","method":"POST","headers":{":authority":"e2e-shared-b-ce87c9.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:44:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2f46511e-e5bd-4b67-a4d6-228ca7fc6bc0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T17:44:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2f46511e-e5bd-4b67-a4d6-228ca7fc6bc0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fe2d1374-3506-4595-ba2a-c54968aa7ca0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=837fe462-1f38-4836-a7b2-ac69beffdf31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c26313fcaa60"]}}
{"level":"debug","ts":"2026-07-07T17:44:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2f46511e-e5bd-4b67-a4d6-228ca7fc6bc0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c26313fcaa60"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=837fe462-1f38-4836-a7b2-ac69beffdf31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fe2d1374-3506-4595-ba2a-c54968aa7ca0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e0f8e20e049197b76ebeac4abe24f913efd1e862a1a1ff6ba439b4ecc04dfe06"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ce87c9.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:44:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f46511e-e5bd-4b67-a4d6-228ca7fc6bc0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:44:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f46511e-e5bd-4b67-a4d6-228ca7fc6bc0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:44:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f46511e-e5bd-4b67-a4d6-228ca7fc6bc0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ce87c9/auth-test-model-ce87c9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:44:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2f46511e-e5bd-4b67-a4d6-228ca7fc6bc0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T17:44:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f46511e-e5bd-4b67-a4d6-228ca7fc6bc0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T17:44:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f46511e-e5bd-4b67-a4d6-228ca7fc6bc0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T17:44:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f46511e-e5bd-4b67-a4d6-228ca7fc6bc0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T17:44:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f46511e-e5bd-4b67-a4d6-228ca7fc6bc0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T17:44:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59e6d2e3-f6ec-483d-bcd8-ba419a592e75","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:46266","PortSpecifier":{"PortValue":46266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"59e6d2e3-f6ec-483d-bcd8-ba419a592e75","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T17:44:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59e6d2e3-f6ec-483d-bcd8-ba419a592e75","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:46266","PortSpecifier":{"PortValue":46266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783446298,"nanos":896326902},"http":{"id":"59e6d2e3-f6ec-483d-bcd8-ba419a592e75","method":"POST","headers":{":authority":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:44:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"59e6d2e3-f6ec-483d-bcd8-ba419a592e75","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11KrcPUkHJGh0Wl2H_7C0lmPxf6pJkK1dTxPfCSJZ9mfhZ18B57DmKc3WDKlT"}
{"level":"debug","ts":"2026-07-07T17:44:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"59e6d2e3-f6ec-483d-bcd8-ba419a592e75","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11KrcPUkHJGh0Wl2H_7C0lmPxf6pJkK1dTxPfCSJZ9mfhZ18B57DmKc3WDKlT\"}"}
{"level":"debug","ts":"2026-07-07T17:44:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"59e6d2e3-f6ec-483d-bcd8-ba419a592e75","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"711fb1df-8c0d-43fb-864f-72eed66e473f","keyName":"e2e-auth-iso-a-82dbd7","subscription":"e2e-auth-iso-fff66f","tenant":"e2e-shared-a-19c9b1","userId":"711fb1df-8c0d-43fb-864f-72eed66e473f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T17:44:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"59e6d2e3-f6ec-483d-bcd8-ba419a592e75","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:44:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59e6d2e3-f6ec-483d-bcd8-ba419a592e75","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:44:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59e6d2e3-f6ec-483d-bcd8-ba419a592e75","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:44:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59e6d2e3-f6ec-483d-bcd8-ba419a592e75","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-19c9b1/auth-test-model-19c9b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:44:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59e6d2e3-f6ec-483d-bcd8-ba419a592e75","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-fff66f"}
{"level":"debug","ts":"2026-07-07T17:44:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59e6d2e3-f6ec-483d-bcd8-ba419a592e75","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T17:44:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59e6d2e3-f6ec-483d-bcd8-ba419a592e75","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T17:44:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"59e6d2e3-f6ec-483d-bcd8-ba419a592e75","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-07T17:44:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59e6d2e3-f6ec-483d-bcd8-ba419a592e75","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T17:44:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59e6d2e3-f6ec-483d-bcd8-ba419a592e75","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e27fac879805007c6622b23570ce787b05fab8c13adf17edd4cf3752f846c0a"}
{"level":"info","ts":"2026-07-07T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/46124bfc24243892a02fb411b11f6e90702e525d3d3f75334587b4416af6f0a0"}
{"level":"info","ts":"2026-07-07T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a1edd13fde491117a3f42dec424aca3dba7896c1b09f842b8f635e841d64029d"}
{"level":"info","ts":"2026-07-07T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d66b4bf6e1ffa4fbc0d6fbd6520cf761742c548cbf5db04f2ae5519c6657e42"}
{"level":"info","ts":"2026-07-07T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e796b73fe3b83ae3e46f2e635c1454862bc5248caa9d6cb6925e1d644dee6fa"}
{"level":"info","ts":"2026-07-07T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8183131e4c6403f17476eecd1b30529008fca0870f9f52ec2f45a69d53496e5a"}
{"level":"info","ts":"2026-07-07T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e83a8ef3d58361655fb02946890f7adf5f53a22fb056e37ee0c0c4a4a5ccb80"}
{"level":"info","ts":"2026-07-07T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1f294577397a34276e5d869404b5c5cc550d5f3e84a44f230beb2db970031ec"}
{"level":"info","ts":"2026-07-07T17:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e642bff564a8a038bdddf2d0135275624e7ffb4ec570799fb017f3c1fc1f491"}
{"level":"info","ts":"2026-07-07T17:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bef0938066ce645dd9f160bc712134164dff0c48cc3130eb87a260546693f903"}
{"level":"info","ts":"2026-07-07T17:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/feabe433fda41bba107cd610b62ca28355f6bd391e7e5060580ce1bf62efaa60"}
{"level":"info","ts":"2026-07-07T17:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b25200f7199e1d5fb6de3f1ab06b67dc4edffb6e9cc8dec0d51d8233bd3e01c7"}
{"level":"info","ts":"2026-07-07T17:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb2725c593aabe88f8a9d460528c5287c8007c237cba7037ec0c4a0f6b3b5077"}
{"level":"info","ts":"2026-07-07T17:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7323c0ba850d46256dd1af21bfaaccdce89e8b859786ea3a7b66abe30454f09"}
{"level":"info","ts":"2026-07-07T17:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/011fa5e1af394ea8f05bbdae1b90c88de38862dc4ce354b1ecfb12c249469d6f"}
{"level":"info","ts":"2026-07-07T17:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/71393a6dc8f7374874fb4165cc496f519f83f834f3b76a1e561592bfd548806c"}
{"level":"debug","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0b7d2fbb4f1b1bfb5980c4fc50de774c0473bdc16f9c746a113675f74d37565","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0b7d2fbb4f1b1bfb5980c4fc50de774c0473bdc16f9c746a113675f74d37565","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0b7d2fbb4f1b1bfb5980c4fc50de774c0473bdc16f9c746a113675f74d37565","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0b7d2fbb4f1b1bfb5980c4fc50de774c0473bdc16f9c746a113675f74d37565","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0b7d2fbb4f1b1bfb5980c4fc50de774c0473bdc16f9c746a113675f74d37565"}
{"level":"debug","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0b7d2fbb4f1b1bfb5980c4fc50de774c0473bdc16f9c746a113675f74d37565","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0b7d2fbb4f1b1bfb5980c4fc50de774c0473bdc16f9c746a113675f74d37565"}
{"level":"debug","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0b7d2fbb4f1b1bfb5980c4fc50de774c0473bdc16f9c746a113675f74d37565","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:45:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:45:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0b7d2fbb4f1b1bfb5980c4fc50de774c0473bdc16f9c746a113675f74d37565"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0b7d2fbb4f1b1bfb5980c4fc50de774c0473bdc16f9c746a113675f74d37565","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0b7d2fbb4f1b1bfb5980c4fc50de774c0473bdc16f9c746a113675f74d37565","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0b7d2fbb4f1b1bfb5980c4fc50de774c0473bdc16f9c746a113675f74d37565"}
{"level":"debug","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00cda67ecd4915b2d14abe35cd8889d71f5e0775a0a3f249c297605d9f300ece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00cda67ecd4915b2d14abe35cd8889d71f5e0775a0a3f249c297605d9f300ece","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00cda67ecd4915b2d14abe35cd8889d71f5e0775a0a3f249c297605d9f300ece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00cda67ecd4915b2d14abe35cd8889d71f5e0775a0a3f249c297605d9f300ece"}
{"level":"info","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00cda67ecd4915b2d14abe35cd8889d71f5e0775a0a3f249c297605d9f300ece","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00cda67ecd4915b2d14abe35cd8889d71f5e0775a0a3f249c297605d9f300ece","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00cda67ecd4915b2d14abe35cd8889d71f5e0775a0a3f249c297605d9f300ece","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00cda67ecd4915b2d14abe35cd8889d71f5e0775a0a3f249c297605d9f300ece"}
{"level":"debug","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00cda67ecd4915b2d14abe35cd8889d71f5e0775a0a3f249c297605d9f300ece","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1165a6fa710939e572ca3356bd3f774341aeb82f4d94d7c8a63900d5710c209f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00cda67ecd4915b2d14abe35cd8889d71f5e0775a0a3f249c297605d9f300ece"}
{"level":"info","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1165a6fa710939e572ca3356bd3f774341aeb82f4d94d7c8a63900d5710c209f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1165a6fa710939e572ca3356bd3f774341aeb82f4d94d7c8a63900d5710c209f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1165a6fa710939e572ca3356bd3f774341aeb82f4d94d7c8a63900d5710c209f"}
{"level":"info","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1165a6fa710939e572ca3356bd3f774341aeb82f4d94d7c8a63900d5710c209f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1165a6fa710939e572ca3356bd3f774341aeb82f4d94d7c8a63900d5710c209f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1165a6fa710939e572ca3356bd3f774341aeb82f4d94d7c8a63900d5710c209f"}
{"level":"error","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1165a6fa710939e572ca3356bd3f774341aeb82f4d94d7c8a63900d5710c209f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1165a6fa710939e572ca3356bd3f774341aeb82f4d94d7c8a63900d5710c209f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1165a6fa710939e572ca3356bd3f774341aeb82f4d94d7c8a63900d5710c209f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1165a6fa710939e572ca3356bd3f774341aeb82f4d94d7c8a63900d5710c209f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1165a6fa710939e572ca3356bd3f774341aeb82f4d94d7c8a63900d5710c209f"}
{"level":"debug","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00cda67ecd4915b2d14abe35cd8889d71f5e0775a0a3f249c297605d9f300ece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:45:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:45:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00cda67ecd4915b2d14abe35cd8889d71f5e0775a0a3f249c297605d9f300ece"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00cda67ecd4915b2d14abe35cd8889d71f5e0775a0a3f249c297605d9f300ece","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00cda67ecd4915b2d14abe35cd8889d71f5e0775a0a3f249c297605d9f300ece","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e16c8d5f13fdbde2b6d236eb23a3b7e9e22087b08c24316401c200079e5cc934","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00cda67ecd4915b2d14abe35cd8889d71f5e0775a0a3f249c297605d9f300ece"}
{"level":"info","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e16c8d5f13fdbde2b6d236eb23a3b7e9e22087b08c24316401c200079e5cc934","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcc8954c95c1f6a0f10eecdada7ae0c034122a608c4c244220264ab991e98385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcc8954c95c1f6a0f10eecdada7ae0c034122a608c4c244220264ab991e98385","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e16c8d5f13fdbde2b6d236eb23a3b7e9e22087b08c24316401c200079e5cc934","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e16c8d5f13fdbde2b6d236eb23a3b7e9e22087b08c24316401c200079e5cc934"}
{"level":"info","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e16c8d5f13fdbde2b6d236eb23a3b7e9e22087b08c24316401c200079e5cc934","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1165a6fa710939e572ca3356bd3f774341aeb82f4d94d7c8a63900d5710c209f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:45:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:45:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1165a6fa710939e572ca3356bd3f774341aeb82f4d94d7c8a63900d5710c209f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcc8954c95c1f6a0f10eecdada7ae0c034122a608c4c244220264ab991e98385"}
{"level":"info","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1165a6fa710939e572ca3356bd3f774341aeb82f4d94d7c8a63900d5710c209f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcc8954c95c1f6a0f10eecdada7ae0c034122a608c4c244220264ab991e98385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:45:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:45:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fcc8954c95c1f6a0f10eecdada7ae0c034122a608c4c244220264ab991e98385"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e16c8d5f13fdbde2b6d236eb23a3b7e9e22087b08c24316401c200079e5cc934"}
{"level":"info","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcc8954c95c1f6a0f10eecdada7ae0c034122a608c4c244220264ab991e98385","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e16c8d5f13fdbde2b6d236eb23a3b7e9e22087b08c24316401c200079e5cc934","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:45:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:45:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e16c8d5f13fdbde2b6d236eb23a3b7e9e22087b08c24316401c200079e5cc934"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcc8954c95c1f6a0f10eecdada7ae0c034122a608c4c244220264ab991e98385"}
{"level":"info","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e16c8d5f13fdbde2b6d236eb23a3b7e9e22087b08c24316401c200079e5cc934","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1165a6fa710939e572ca3356bd3f774341aeb82f4d94d7c8a63900d5710c209f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1165a6fa710939e572ca3356bd3f774341aeb82f4d94d7c8a63900d5710c209f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcc8954c95c1f6a0f10eecdada7ae0c034122a608c4c244220264ab991e98385","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e16c8d5f13fdbde2b6d236eb23a3b7e9e22087b08c24316401c200079e5cc934","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b665b568579d8f0942d0dfce5b3551e74ad0e95bc92ee987aa78254efec28bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1165a6fa710939e572ca3356bd3f774341aeb82f4d94d7c8a63900d5710c209f"}
{"level":"info","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b665b568579d8f0942d0dfce5b3551e74ad0e95bc92ee987aa78254efec28bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1165a6fa710939e572ca3356bd3f774341aeb82f4d94d7c8a63900d5710c209f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:45:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:45:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1165a6fa710939e572ca3356bd3f774341aeb82f4d94d7c8a63900d5710c209f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcc8954c95c1f6a0f10eecdada7ae0c034122a608c4c244220264ab991e98385"}
{"level":"info","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1165a6fa710939e572ca3356bd3f774341aeb82f4d94d7c8a63900d5710c209f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b665b568579d8f0942d0dfce5b3551e74ad0e95bc92ee987aa78254efec28bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1165a6fa710939e572ca3356bd3f774341aeb82f4d94d7c8a63900d5710c209f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b665b568579d8f0942d0dfce5b3551e74ad0e95bc92ee987aa78254efec28bb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e16c8d5f13fdbde2b6d236eb23a3b7e9e22087b08c24316401c200079e5cc934"}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b665b568579d8f0942d0dfce5b3551e74ad0e95bc92ee987aa78254efec28bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b665b568579d8f0942d0dfce5b3551e74ad0e95bc92ee987aa78254efec28bb"}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b665b568579d8f0942d0dfce5b3551e74ad0e95bc92ee987aa78254efec28bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b665b568579d8f0942d0dfce5b3551e74ad0e95bc92ee987aa78254efec28bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b665b568579d8f0942d0dfce5b3551e74ad0e95bc92ee987aa78254efec28bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1165a6fa710939e572ca3356bd3f774341aeb82f4d94d7c8a63900d5710c209f"}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b665b568579d8f0942d0dfce5b3551e74ad0e95bc92ee987aa78254efec28bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b665b568579d8f0942d0dfce5b3551e74ad0e95bc92ee987aa78254efec28bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b665b568579d8f0942d0dfce5b3551e74ad0e95bc92ee987aa78254efec28bb"}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b665b568579d8f0942d0dfce5b3551e74ad0e95bc92ee987aa78254efec28bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b665b568579d8f0942d0dfce5b3551e74ad0e95bc92ee987aa78254efec28bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b665b568579d8f0942d0dfce5b3551e74ad0e95bc92ee987aa78254efec28bb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b665b568579d8f0942d0dfce5b3551e74ad0e95bc92ee987aa78254efec28bb"}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b665b568579d8f0942d0dfce5b3551e74ad0e95bc92ee987aa78254efec28bb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b665b568579d8f0942d0dfce5b3551e74ad0e95bc92ee987aa78254efec28bb"}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b665b568579d8f0942d0dfce5b3551e74ad0e95bc92ee987aa78254efec28bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b665b568579d8f0942d0dfce5b3551e74ad0e95bc92ee987aa78254efec28bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b665b568579d8f0942d0dfce5b3551e74ad0e95bc92ee987aa78254efec28bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb668d62ed7d83caaa082b774443e629b4a48a5077b8a8630ba4c1f9e79a6cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb668d62ed7d83caaa082b774443e629b4a48a5077b8a8630ba4c1f9e79a6cf"}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb668d62ed7d83caaa082b774443e629b4a48a5077b8a8630ba4c1f9e79a6cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b665b568579d8f0942d0dfce5b3551e74ad0e95bc92ee987aa78254efec28bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b665b568579d8f0942d0dfce5b3551e74ad0e95bc92ee987aa78254efec28bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b665b568579d8f0942d0dfce5b3551e74ad0e95bc92ee987aa78254efec28bb"}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb668d62ed7d83caaa082b774443e629b4a48a5077b8a8630ba4c1f9e79a6cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbb668d62ed7d83caaa082b774443e629b4a48a5077b8a8630ba4c1f9e79a6cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda"}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb668d62ed7d83caaa082b774443e629b4a48a5077b8a8630ba4c1f9e79a6cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b665b568579d8f0942d0dfce5b3551e74ad0e95bc92ee987aa78254efec28bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b665b568579d8f0942d0dfce5b3551e74ad0e95bc92ee987aa78254efec28bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b665b568579d8f0942d0dfce5b3551e74ad0e95bc92ee987aa78254efec28bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb668d62ed7d83caaa082b774443e629b4a48a5077b8a8630ba4c1f9e79a6cf"}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb668d62ed7d83caaa082b774443e629b4a48a5077b8a8630ba4c1f9e79a6cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b665b568579d8f0942d0dfce5b3551e74ad0e95bc92ee987aa78254efec28bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b665b568579d8f0942d0dfce5b3551e74ad0e95bc92ee987aa78254efec28bb"}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b665b568579d8f0942d0dfce5b3551e74ad0e95bc92ee987aa78254efec28bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b665b568579d8f0942d0dfce5b3551e74ad0e95bc92ee987aa78254efec28bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b665b568579d8f0942d0dfce5b3551e74ad0e95bc92ee987aa78254efec28bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda"}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b665b568579d8f0942d0dfce5b3551e74ad0e95bc92ee987aa78254efec28bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb668d62ed7d83caaa082b774443e629b4a48a5077b8a8630ba4c1f9e79a6cf"}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b665b568579d8f0942d0dfce5b3551e74ad0e95bc92ee987aa78254efec28bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b665b568579d8f0942d0dfce5b3551e74ad0e95bc92ee987aa78254efec28bb"}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b665b568579d8f0942d0dfce5b3551e74ad0e95bc92ee987aa78254efec28bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b665b568579d8f0942d0dfce5b3551e74ad0e95bc92ee987aa78254efec28bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b665b568579d8f0942d0dfce5b3551e74ad0e95bc92ee987aa78254efec28bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda"}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b665b568579d8f0942d0dfce5b3551e74ad0e95bc92ee987aa78254efec28bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b665b568579d8f0942d0dfce5b3551e74ad0e95bc92ee987aa78254efec28bb"}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b665b568579d8f0942d0dfce5b3551e74ad0e95bc92ee987aa78254efec28bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda"}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b665b568579d8f0942d0dfce5b3551e74ad0e95bc92ee987aa78254efec28bb"}
{"level":"error","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda"}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda"}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda"}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda"}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda"}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda"}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda"}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda"}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda"}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda"}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda"}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda"}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda"}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda"}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda"}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda"}
{"level":"debug","ts":"2026-07-07T17:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:45:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:45:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda"}
{"level":"debug","ts":"2026-07-07T17:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda"}
{"level":"debug","ts":"2026-07-07T17:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:45:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:45:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda"}
{"level":"debug","ts":"2026-07-07T17:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda"}
{"level":"debug","ts":"2026-07-07T17:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:45:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:45:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda"}
{"level":"debug","ts":"2026-07-07T17:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda"}
{"level":"debug","ts":"2026-07-07T17:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:45:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:45:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda"}
{"level":"debug","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8b2cdd5de42025d0b0b791c5a332b6cf7646fef19fa47cec4bdc091acd600b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8b2cdd5de42025d0b0b791c5a332b6cf7646fef19fa47cec4bdc091acd600b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8b2cdd5de42025d0b0b791c5a332b6cf7646fef19fa47cec4bdc091acd600b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8b2cdd5de42025d0b0b791c5a332b6cf7646fef19fa47cec4bdc091acd600b1"}
{"level":"info","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8b2cdd5de42025d0b0b791c5a332b6cf7646fef19fa47cec4bdc091acd600b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8b2cdd5de42025d0b0b791c5a332b6cf7646fef19fa47cec4bdc091acd600b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e8b2cdd5de42025d0b0b791c5a332b6cf7646fef19fa47cec4bdc091acd600b1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e8b2cdd5de42025d0b0b791c5a332b6cf7646fef19fa47cec4bdc091acd600b1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8b2cdd5de42025d0b0b791c5a332b6cf7646fef19fa47cec4bdc091acd600b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8b2cdd5de42025d0b0b791c5a332b6cf7646fef19fa47cec4bdc091acd600b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8b2cdd5de42025d0b0b791c5a332b6cf7646fef19fa47cec4bdc091acd600b1"}
{"level":"info","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8b2cdd5de42025d0b0b791c5a332b6cf7646fef19fa47cec4bdc091acd600b1"}
{"level":"debug","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8b2cdd5de42025d0b0b791c5a332b6cf7646fef19fa47cec4bdc091acd600b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:45:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:45:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8b2cdd5de42025d0b0b791c5a332b6cf7646fef19fa47cec4bdc091acd600b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8b2cdd5de42025d0b0b791c5a332b6cf7646fef19fa47cec4bdc091acd600b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8b2cdd5de42025d0b0b791c5a332b6cf7646fef19fa47cec4bdc091acd600b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8b2cdd5de42025d0b0b791c5a332b6cf7646fef19fa47cec4bdc091acd600b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8b2cdd5de42025d0b0b791c5a332b6cf7646fef19fa47cec4bdc091acd600b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8b2cdd5de42025d0b0b791c5a332b6cf7646fef19fa47cec4bdc091acd600b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8b2cdd5de42025d0b0b791c5a332b6cf7646fef19fa47cec4bdc091acd600b1"}
{"level":"debug","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8b2cdd5de42025d0b0b791c5a332b6cf7646fef19fa47cec4bdc091acd600b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8b2cdd5de42025d0b0b791c5a332b6cf7646fef19fa47cec4bdc091acd600b1"}
{"level":"debug","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8b2cdd5de42025d0b0b791c5a332b6cf7646fef19fa47cec4bdc091acd600b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:45:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:45:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8b2cdd5de42025d0b0b791c5a332b6cf7646fef19fa47cec4bdc091acd600b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8b2cdd5de42025d0b0b791c5a332b6cf7646fef19fa47cec4bdc091acd600b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8b2cdd5de42025d0b0b791c5a332b6cf7646fef19fa47cec4bdc091acd600b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8b2cdd5de42025d0b0b791c5a332b6cf7646fef19fa47cec4bdc091acd600b1"}
{"level":"debug","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26b8c3e29c212518783457ac87e07bf3a031a446501497c807b74e8d9fdba340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26b8c3e29c212518783457ac87e07bf3a031a446501497c807b74e8d9fdba340","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26b8c3e29c212518783457ac87e07bf3a031a446501497c807b74e8d9fdba340","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26b8c3e29c212518783457ac87e07bf3a031a446501497c807b74e8d9fdba340"}
{"level":"debug","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26b8c3e29c212518783457ac87e07bf3a031a446501497c807b74e8d9fdba340","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26b8c3e29c212518783457ac87e07bf3a031a446501497c807b74e8d9fdba340"}
{"level":"debug","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26b8c3e29c212518783457ac87e07bf3a031a446501497c807b74e8d9fdba340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:45:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:45:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26b8c3e29c212518783457ac87e07bf3a031a446501497c807b74e8d9fdba340"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26b8c3e29c212518783457ac87e07bf3a031a446501497c807b74e8d9fdba340","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26b8c3e29c212518783457ac87e07bf3a031a446501497c807b74e8d9fdba340","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26b8c3e29c212518783457ac87e07bf3a031a446501497c807b74e8d9fdba340"}
{"level":"debug","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd8d640abec8061f3b3f81384a554e53f75156a507a69b6ae599af95b0afcc82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd8d640abec8061f3b3f81384a554e53f75156a507a69b6ae599af95b0afcc82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd8d640abec8061f3b3f81384a554e53f75156a507a69b6ae599af95b0afcc82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd8d640abec8061f3b3f81384a554e53f75156a507a69b6ae599af95b0afcc82"}
{"level":"info","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd8d640abec8061f3b3f81384a554e53f75156a507a69b6ae599af95b0afcc82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd8d640abec8061f3b3f81384a554e53f75156a507a69b6ae599af95b0afcc82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd8d640abec8061f3b3f81384a554e53f75156a507a69b6ae599af95b0afcc82"}
{"level":"error","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cd8d640abec8061f3b3f81384a554e53f75156a507a69b6ae599af95b0afcc82","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cd8d640abec8061f3b3f81384a554e53f75156a507a69b6ae599af95b0afcc82\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd8d640abec8061f3b3f81384a554e53f75156a507a69b6ae599af95b0afcc82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd8d640abec8061f3b3f81384a554e53f75156a507a69b6ae599af95b0afcc82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd8d640abec8061f3b3f81384a554e53f75156a507a69b6ae599af95b0afcc82"}
{"level":"debug","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cc1c6f503e2d547f4a1478a2056a974f9e596835de995689f1aee82536865c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cc1c6f503e2d547f4a1478a2056a974f9e596835de995689f1aee82536865c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cc1c6f503e2d547f4a1478a2056a974f9e596835de995689f1aee82536865c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cc1c6f503e2d547f4a1478a2056a974f9e596835de995689f1aee82536865c5"}
{"level":"info","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cc1c6f503e2d547f4a1478a2056a974f9e596835de995689f1aee82536865c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd8d640abec8061f3b3f81384a554e53f75156a507a69b6ae599af95b0afcc82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:45:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:45:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd8d640abec8061f3b3f81384a554e53f75156a507a69b6ae599af95b0afcc82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cc1c6f503e2d547f4a1478a2056a974f9e596835de995689f1aee82536865c5"}
{"level":"info","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd8d640abec8061f3b3f81384a554e53f75156a507a69b6ae599af95b0afcc82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6cc1c6f503e2d547f4a1478a2056a974f9e596835de995689f1aee82536865c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd8d640abec8061f3b3f81384a554e53f75156a507a69b6ae599af95b0afcc82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cc1c6f503e2d547f4a1478a2056a974f9e596835de995689f1aee82536865c5"}
{"level":"debug","ts":"2026-07-07T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cc1c6f503e2d547f4a1478a2056a974f9e596835de995689f1aee82536865c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:45:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:45:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6cc1c6f503e2d547f4a1478a2056a974f9e596835de995689f1aee82536865c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd8d640abec8061f3b3f81384a554e53f75156a507a69b6ae599af95b0afcc82"}
{"level":"info","ts":"2026-07-07T17:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cc1c6f503e2d547f4a1478a2056a974f9e596835de995689f1aee82536865c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cc1c6f503e2d547f4a1478a2056a974f9e596835de995689f1aee82536865c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cc1c6f503e2d547f4a1478a2056a974f9e596835de995689f1aee82536865c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15c32b565bf67507f2ee1986156c4f8c73a7797bed8b20da9462f4a609675783","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cc1c6f503e2d547f4a1478a2056a974f9e596835de995689f1aee82536865c5"}
{"level":"info","ts":"2026-07-07T17:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15c32b565bf67507f2ee1986156c4f8c73a7797bed8b20da9462f4a609675783","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cc1c6f503e2d547f4a1478a2056a974f9e596835de995689f1aee82536865c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:45:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:45:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6cc1c6f503e2d547f4a1478a2056a974f9e596835de995689f1aee82536865c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15c32b565bf67507f2ee1986156c4f8c73a7797bed8b20da9462f4a609675783"}
{"level":"info","ts":"2026-07-07T17:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cc1c6f503e2d547f4a1478a2056a974f9e596835de995689f1aee82536865c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"787b4992f13df17d06695a1d740e18e85ecd6e30f45655cf8c9b368eb2d9829f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cc1c6f503e2d547f4a1478a2056a974f9e596835de995689f1aee82536865c5"}
{"level":"info","ts":"2026-07-07T17:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"787b4992f13df17d06695a1d740e18e85ecd6e30f45655cf8c9b368eb2d9829f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15c32b565bf67507f2ee1986156c4f8c73a7797bed8b20da9462f4a609675783","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:45:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:45:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15c32b565bf67507f2ee1986156c4f8c73a7797bed8b20da9462f4a609675783"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/787b4992f13df17d06695a1d740e18e85ecd6e30f45655cf8c9b368eb2d9829f"}
{"level":"info","ts":"2026-07-07T17:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15c32b565bf67507f2ee1986156c4f8c73a7797bed8b20da9462f4a609675783","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6cc1c6f503e2d547f4a1478a2056a974f9e596835de995689f1aee82536865c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"787b4992f13df17d06695a1d740e18e85ecd6e30f45655cf8c9b368eb2d9829f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:45:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:45:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["787b4992f13df17d06695a1d740e18e85ecd6e30f45655cf8c9b368eb2d9829f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"787b4992f13df17d06695a1d740e18e85ecd6e30f45655cf8c9b368eb2d9829f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15c32b565bf67507f2ee1986156c4f8c73a7797bed8b20da9462f4a609675783","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15c32b565bf67507f2ee1986156c4f8c73a7797bed8b20da9462f4a609675783"}
{"level":"info","ts":"2026-07-07T17:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15c32b565bf67507f2ee1986156c4f8c73a7797bed8b20da9462f4a609675783","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"787b4992f13df17d06695a1d740e18e85ecd6e30f45655cf8c9b368eb2d9829f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3539fdba924ea383df98e9f591560a451c5b76f15b5b8836c0c76903f0f2915","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cc1c6f503e2d547f4a1478a2056a974f9e596835de995689f1aee82536865c5"}
{"level":"info","ts":"2026-07-07T17:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3539fdba924ea383df98e9f591560a451c5b76f15b5b8836c0c76903f0f2915","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15c32b565bf67507f2ee1986156c4f8c73a7797bed8b20da9462f4a609675783","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:45:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:45:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15c32b565bf67507f2ee1986156c4f8c73a7797bed8b20da9462f4a609675783"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15c32b565bf67507f2ee1986156c4f8c73a7797bed8b20da9462f4a609675783","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3539fdba924ea383df98e9f591560a451c5b76f15b5b8836c0c76903f0f2915","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15c32b565bf67507f2ee1986156c4f8c73a7797bed8b20da9462f4a609675783","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/787b4992f13df17d06695a1d740e18e85ecd6e30f45655cf8c9b368eb2d9829f"}
{"level":"debug","ts":"2026-07-07T17:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3539fdba924ea383df98e9f591560a451c5b76f15b5b8836c0c76903f0f2915","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3539fdba924ea383df98e9f591560a451c5b76f15b5b8836c0c76903f0f2915","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15c32b565bf67507f2ee1986156c4f8c73a7797bed8b20da9462f4a609675783"}
{"level":"debug","ts":"2026-07-07T17:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"485801dacb82209a38ccd8afc9f49329df84de33c2948f7245fe061565c611b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3539fdba924ea383df98e9f591560a451c5b76f15b5b8836c0c76903f0f2915"}
{"level":"info","ts":"2026-07-07T17:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"485801dacb82209a38ccd8afc9f49329df84de33c2948f7245fe061565c611b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3539fdba924ea383df98e9f591560a451c5b76f15b5b8836c0c76903f0f2915","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:45:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:45:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3539fdba924ea383df98e9f591560a451c5b76f15b5b8836c0c76903f0f2915"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3539fdba924ea383df98e9f591560a451c5b76f15b5b8836c0c76903f0f2915","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"485801dacb82209a38ccd8afc9f49329df84de33c2948f7245fe061565c611b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/485801dacb82209a38ccd8afc9f49329df84de33c2948f7245fe061565c611b7"}
{"level":"info","ts":"2026-07-07T17:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"485801dacb82209a38ccd8afc9f49329df84de33c2948f7245fe061565c611b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3539fdba924ea383df98e9f591560a451c5b76f15b5b8836c0c76903f0f2915","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"485801dacb82209a38ccd8afc9f49329df84de33c2948f7245fe061565c611b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/485801dacb82209a38ccd8afc9f49329df84de33c2948f7245fe061565c611b7"}
{"level":"debug","ts":"2026-07-07T17:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"485801dacb82209a38ccd8afc9f49329df84de33c2948f7245fe061565c611b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:45:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:45:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["485801dacb82209a38ccd8afc9f49329df84de33c2948f7245fe061565c611b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"485801dacb82209a38ccd8afc9f49329df84de33c2948f7245fe061565c611b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"485801dacb82209a38ccd8afc9f49329df84de33c2948f7245fe061565c611b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3539fdba924ea383df98e9f591560a451c5b76f15b5b8836c0c76903f0f2915"}
{"level":"info","ts":"2026-07-07T17:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/485801dacb82209a38ccd8afc9f49329df84de33c2948f7245fe061565c611b7"}
{"level":"debug","ts":"2026-07-07T17:45:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"787b4992f13df17d06695a1d740e18e85ecd6e30f45655cf8c9b368eb2d9829f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"787b4992f13df17d06695a1d740e18e85ecd6e30f45655cf8c9b368eb2d9829f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"787b4992f13df17d06695a1d740e18e85ecd6e30f45655cf8c9b368eb2d9829f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"787b4992f13df17d06695a1d740e18e85ecd6e30f45655cf8c9b368eb2d9829f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/787b4992f13df17d06695a1d740e18e85ecd6e30f45655cf8c9b368eb2d9829f"}
{"level":"debug","ts":"2026-07-07T17:45:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"787b4992f13df17d06695a1d740e18e85ecd6e30f45655cf8c9b368eb2d9829f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/787b4992f13df17d06695a1d740e18e85ecd6e30f45655cf8c9b368eb2d9829f"}
{"level":"debug","ts":"2026-07-07T17:45:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"787b4992f13df17d06695a1d740e18e85ecd6e30f45655cf8c9b368eb2d9829f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:45:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:45:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["787b4992f13df17d06695a1d740e18e85ecd6e30f45655cf8c9b368eb2d9829f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"787b4992f13df17d06695a1d740e18e85ecd6e30f45655cf8c9b368eb2d9829f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"787b4992f13df17d06695a1d740e18e85ecd6e30f45655cf8c9b368eb2d9829f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"787b4992f13df17d06695a1d740e18e85ecd6e30f45655cf8c9b368eb2d9829f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"787b4992f13df17d06695a1d740e18e85ecd6e30f45655cf8c9b368eb2d9829f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/787b4992f13df17d06695a1d740e18e85ecd6e30f45655cf8c9b368eb2d9829f"}
{"level":"debug","ts":"2026-07-07T17:45:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"787b4992f13df17d06695a1d740e18e85ecd6e30f45655cf8c9b368eb2d9829f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/787b4992f13df17d06695a1d740e18e85ecd6e30f45655cf8c9b368eb2d9829f"}
{"level":"debug","ts":"2026-07-07T17:45:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"787b4992f13df17d06695a1d740e18e85ecd6e30f45655cf8c9b368eb2d9829f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"787b4992f13df17d06695a1d740e18e85ecd6e30f45655cf8c9b368eb2d9829f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:45:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:45:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["787b4992f13df17d06695a1d740e18e85ecd6e30f45655cf8c9b368eb2d9829f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"787b4992f13df17d06695a1d740e18e85ecd6e30f45655cf8c9b368eb2d9829f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"787b4992f13df17d06695a1d740e18e85ecd6e30f45655cf8c9b368eb2d9829f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/787b4992f13df17d06695a1d740e18e85ecd6e30f45655cf8c9b368eb2d9829f"}
{"level":"debug","ts":"2026-07-07T17:45:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b665b568579d8f0942d0dfce5b3551e74ad0e95bc92ee987aa78254efec28bb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b665b568579d8f0942d0dfce5b3551e74ad0e95bc92ee987aa78254efec28bb"}
{"level":"debug","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"485801dacb82209a38ccd8afc9f49329df84de33c2948f7245fe061565c611b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"485801dacb82209a38ccd8afc9f49329df84de33c2948f7245fe061565c611b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"485801dacb82209a38ccd8afc9f49329df84de33c2948f7245fe061565c611b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/485801dacb82209a38ccd8afc9f49329df84de33c2948f7245fe061565c611b7"}
{"level":"debug","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"485801dacb82209a38ccd8afc9f49329df84de33c2948f7245fe061565c611b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/485801dacb82209a38ccd8afc9f49329df84de33c2948f7245fe061565c611b7"}
{"level":"debug","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"485801dacb82209a38ccd8afc9f49329df84de33c2948f7245fe061565c611b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"485801dacb82209a38ccd8afc9f49329df84de33c2948f7245fe061565c611b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:45:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:45:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["485801dacb82209a38ccd8afc9f49329df84de33c2948f7245fe061565c611b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"485801dacb82209a38ccd8afc9f49329df84de33c2948f7245fe061565c611b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"485801dacb82209a38ccd8afc9f49329df84de33c2948f7245fe061565c611b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8b2cdd5de42025d0b0b791c5a332b6cf7646fef19fa47cec4bdc091acd600b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/485801dacb82209a38ccd8afc9f49329df84de33c2948f7245fe061565c611b7"}
{"level":"info","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8b2cdd5de42025d0b0b791c5a332b6cf7646fef19fa47cec4bdc091acd600b1"}
{"level":"debug","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e16c8d5f13fdbde2b6d236eb23a3b7e9e22087b08c24316401c200079e5cc934","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e16c8d5f13fdbde2b6d236eb23a3b7e9e22087b08c24316401c200079e5cc934"}
{"level":"debug","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0f8e20e049197b76ebeac4abe24f913efd1e862a1a1ff6ba439b4ecc04dfe06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0f8e20e049197b76ebeac4abe24f913efd1e862a1a1ff6ba439b4ecc04dfe06"}
{"level":"debug","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee5c8259cb0c30598dbdb5dc2df20f5a44ba138c5da30bfe6cabf955e681707d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee5c8259cb0c30598dbdb5dc2df20f5a44ba138c5da30bfe6cabf955e681707d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee5c8259cb0c30598dbdb5dc2df20f5a44ba138c5da30bfe6cabf955e681707d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee5c8259cb0c30598dbdb5dc2df20f5a44ba138c5da30bfe6cabf955e681707d"}
{"level":"debug","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee5c8259cb0c30598dbdb5dc2df20f5a44ba138c5da30bfe6cabf955e681707d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee5c8259cb0c30598dbdb5dc2df20f5a44ba138c5da30bfe6cabf955e681707d"}
{"level":"debug","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee5c8259cb0c30598dbdb5dc2df20f5a44ba138c5da30bfe6cabf955e681707d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:45:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:45:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee5c8259cb0c30598dbdb5dc2df20f5a44ba138c5da30bfe6cabf955e681707d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee5c8259cb0c30598dbdb5dc2df20f5a44ba138c5da30bfe6cabf955e681707d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee5c8259cb0c30598dbdb5dc2df20f5a44ba138c5da30bfe6cabf955e681707d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee5c8259cb0c30598dbdb5dc2df20f5a44ba138c5da30bfe6cabf955e681707d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee5c8259cb0c30598dbdb5dc2df20f5a44ba138c5da30bfe6cabf955e681707d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee5c8259cb0c30598dbdb5dc2df20f5a44ba138c5da30bfe6cabf955e681707d"}
{"level":"debug","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee5c8259cb0c30598dbdb5dc2df20f5a44ba138c5da30bfe6cabf955e681707d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee5c8259cb0c30598dbdb5dc2df20f5a44ba138c5da30bfe6cabf955e681707d"}
{"level":"debug","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee5c8259cb0c30598dbdb5dc2df20f5a44ba138c5da30bfe6cabf955e681707d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:45:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:45:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee5c8259cb0c30598dbdb5dc2df20f5a44ba138c5da30bfe6cabf955e681707d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee5c8259cb0c30598dbdb5dc2df20f5a44ba138c5da30bfe6cabf955e681707d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee5c8259cb0c30598dbdb5dc2df20f5a44ba138c5da30bfe6cabf955e681707d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda"}
{"level":"info","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee5c8259cb0c30598dbdb5dc2df20f5a44ba138c5da30bfe6cabf955e681707d"}
{"level":"debug","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00760d4002d15857a8c7f9f5289c07006c221ca2d0077384071333e4894d149c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"442d566dec4dad9158d3574e413880479effad04ebc5220720f2ee87a5f9fab6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00760d4002d15857a8c7f9f5289c07006c221ca2d0077384071333e4894d149c"}
{"level":"info","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/442d566dec4dad9158d3574e413880479effad04ebc5220720f2ee87a5f9fab6"}
{"level":"debug","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1e7b3a36be8c501c2188990da07a0ec67d60ec50ce7566c918eb44876872137","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1e7b3a36be8c501c2188990da07a0ec67d60ec50ce7566c918eb44876872137","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1e7b3a36be8c501c2188990da07a0ec67d60ec50ce7566c918eb44876872137","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1e7b3a36be8c501c2188990da07a0ec67d60ec50ce7566c918eb44876872137","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1e7b3a36be8c501c2188990da07a0ec67d60ec50ce7566c918eb44876872137"}
{"level":"debug","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1e7b3a36be8c501c2188990da07a0ec67d60ec50ce7566c918eb44876872137","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1e7b3a36be8c501c2188990da07a0ec67d60ec50ce7566c918eb44876872137"}
{"level":"debug","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1e7b3a36be8c501c2188990da07a0ec67d60ec50ce7566c918eb44876872137","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:45:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:45:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1e7b3a36be8c501c2188990da07a0ec67d60ec50ce7566c918eb44876872137"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1e7b3a36be8c501c2188990da07a0ec67d60ec50ce7566c918eb44876872137","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00cda67ecd4915b2d14abe35cd8889d71f5e0775a0a3f249c297605d9f300ece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00cda67ecd4915b2d14abe35cd8889d71f5e0775a0a3f249c297605d9f300ece","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1e7b3a36be8c501c2188990da07a0ec67d60ec50ce7566c918eb44876872137","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3539fdba924ea383df98e9f591560a451c5b76f15b5b8836c0c76903f0f2915","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00cda67ecd4915b2d14abe35cd8889d71f5e0775a0a3f249c297605d9f300ece","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00cda67ecd4915b2d14abe35cd8889d71f5e0775a0a3f249c297605d9f300ece"}
{"level":"debug","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00cda67ecd4915b2d14abe35cd8889d71f5e0775a0a3f249c297605d9f300ece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:45:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:45:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00cda67ecd4915b2d14abe35cd8889d71f5e0775a0a3f249c297605d9f300ece"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00cda67ecd4915b2d14abe35cd8889d71f5e0775a0a3f249c297605d9f300ece","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00cda67ecd4915b2d14abe35cd8889d71f5e0775a0a3f249c297605d9f300ece","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1e7b3a36be8c501c2188990da07a0ec67d60ec50ce7566c918eb44876872137"}
{"level":"info","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3539fdba924ea383df98e9f591560a451c5b76f15b5b8836c0c76903f0f2915"}
{"level":"info","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00cda67ecd4915b2d14abe35cd8889d71f5e0775a0a3f249c297605d9f300ece"}
{"level":"debug","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd8d640abec8061f3b3f81384a554e53f75156a507a69b6ae599af95b0afcc82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd8d640abec8061f3b3f81384a554e53f75156a507a69b6ae599af95b0afcc82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd8d640abec8061f3b3f81384a554e53f75156a507a69b6ae599af95b0afcc82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd8d640abec8061f3b3f81384a554e53f75156a507a69b6ae599af95b0afcc82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0b7d2fbb4f1b1bfb5980c4fc50de774c0473bdc16f9c746a113675f74d37565","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd8d640abec8061f3b3f81384a554e53f75156a507a69b6ae599af95b0afcc82"}
{"level":"debug","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcc8954c95c1f6a0f10eecdada7ae0c034122a608c4c244220264ab991e98385","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd8d640abec8061f3b3f81384a554e53f75156a507a69b6ae599af95b0afcc82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:45:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:45:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd8d640abec8061f3b3f81384a554e53f75156a507a69b6ae599af95b0afcc82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0b7d2fbb4f1b1bfb5980c4fc50de774c0473bdc16f9c746a113675f74d37565"}
{"level":"info","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd8d640abec8061f3b3f81384a554e53f75156a507a69b6ae599af95b0afcc82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15c32b565bf67507f2ee1986156c4f8c73a7797bed8b20da9462f4a609675783","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd8d640abec8061f3b3f81384a554e53f75156a507a69b6ae599af95b0afcc82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:45:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:45:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd8d640abec8061f3b3f81384a554e53f75156a507a69b6ae599af95b0afcc82"}
{"level":"info","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd8d640abec8061f3b3f81384a554e53f75156a507a69b6ae599af95b0afcc82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd8d640abec8061f3b3f81384a554e53f75156a507a69b6ae599af95b0afcc82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:45:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:45:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd8d640abec8061f3b3f81384a554e53f75156a507a69b6ae599af95b0afcc82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:45:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcc8954c95c1f6a0f10eecdada7ae0c034122a608c4c244220264ab991e98385"}
{"level":"info","ts":"2026-07-07T17:45:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd8d640abec8061f3b3f81384a554e53f75156a507a69b6ae599af95b0afcc82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd8d640abec8061f3b3f81384a554e53f75156a507a69b6ae599af95b0afcc82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:45:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:45:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd8d640abec8061f3b3f81384a554e53f75156a507a69b6ae599af95b0afcc82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T17:45:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cd8d640abec8061f3b3f81384a554e53f75156a507a69b6ae599af95b0afcc82","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cd8d640abec8061f3b3f81384a554e53f75156a507a69b6ae599af95b0afcc82\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T17:45:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb668d62ed7d83caaa082b774443e629b4a48a5077b8a8630ba4c1f9e79a6cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd8d640abec8061f3b3f81384a554e53f75156a507a69b6ae599af95b0afcc82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd8d640abec8061f3b3f81384a554e53f75156a507a69b6ae599af95b0afcc82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15c32b565bf67507f2ee1986156c4f8c73a7797bed8b20da9462f4a609675783"}
{"level":"debug","ts":"2026-07-07T17:45:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86d92ea941495ba23e0743303ffd07e32188c7eec7ce21d8939a5447d2deed4a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd8d640abec8061f3b3f81384a554e53f75156a507a69b6ae599af95b0afcc82"}
{"level":"debug","ts":"2026-07-07T17:45:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1165a6fa710939e572ca3356bd3f774341aeb82f4d94d7c8a63900d5710c209f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:45:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c50221d222fb7b8ff4e11098df6b62d7b0c78ec2bc8847434de1ac76313f7c8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb668d62ed7d83caaa082b774443e629b4a48a5077b8a8630ba4c1f9e79a6cf"}
{"level":"info","ts":"2026-07-07T17:45:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86d92ea941495ba23e0743303ffd07e32188c7eec7ce21d8939a5447d2deed4a"}
{"level":"debug","ts":"2026-07-07T17:45:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26b8c3e29c212518783457ac87e07bf3a031a446501497c807b74e8d9fdba340","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1165a6fa710939e572ca3356bd3f774341aeb82f4d94d7c8a63900d5710c209f"}
{"level":"debug","ts":"2026-07-07T17:45:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce6a24861f2e3d59dfe44943df9ca381d708e599247246eba240175ee5c6ffb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c50221d222fb7b8ff4e11098df6b62d7b0c78ec2bc8847434de1ac76313f7c8"}
{"level":"debug","ts":"2026-07-07T17:45:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6cc1c6f503e2d547f4a1478a2056a974f9e596835de995689f1aee82536865c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:45:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26b8c3e29c212518783457ac87e07bf3a031a446501497c807b74e8d9fdba340"}
{"level":"info","ts":"2026-07-07T17:45:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce6a24861f2e3d59dfe44943df9ca381d708e599247246eba240175ee5c6ffb0"}
{"level":"info","ts":"2026-07-07T17:45:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cc1c6f503e2d547f4a1478a2056a974f9e596835de995689f1aee82536865c5"}
{"level":"info","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72d63b60-cf64-4c1d-9b08-b39ac72d4d70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:45348","PortSpecifier":{"PortValue":45348}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"72d63b60-cf64-4c1d-9b08-b39ac72d4d70","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72d63b60-cf64-4c1d-9b08-b39ac72d4d70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:45348","PortSpecifier":{"PortValue":45348}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783446359,"nanos":754733159},"http":{"id":"72d63b60-cf64-4c1d-9b08-b39ac72d4d70","method":"POST","headers":{":authority":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"72d63b60-cf64-4c1d-9b08-b39ac72d4d70","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"72d63b60-cf64-4c1d-9b08-b39ac72d4d70","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fe2d1374-3506-4595-ba2a-c54968aa7ca0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=837fe462-1f38-4836-a7b2-ac69beffdf31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c26313fcaa60"]}}
{"level":"debug","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"72d63b60-cf64-4c1d-9b08-b39ac72d4d70","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c26313fcaa60"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=837fe462-1f38-4836-a7b2-ac69beffdf31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fe2d1374-3506-4595-ba2a-c54968aa7ca0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ce6a24861f2e3d59dfe44943df9ca381d708e599247246eba240175ee5c6ffb0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72d63b60-cf64-4c1d-9b08-b39ac72d4d70","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72d63b60-cf64-4c1d-9b08-b39ac72d4d70","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72d63b60-cf64-4c1d-9b08-b39ac72d4d70","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-19c9b1/sub-test-model-19c9b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"72d63b60-cf64-4c1d-9b08-b39ac72d4d70","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72d63b60-cf64-4c1d-9b08-b39ac72d4d70","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72d63b60-cf64-4c1d-9b08-b39ac72d4d70","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72d63b60-cf64-4c1d-9b08-b39ac72d4d70","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72d63b60-cf64-4c1d-9b08-b39ac72d4d70","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3df4f2f3-a677-48af-afef-670a9d95b535","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:60650","PortSpecifier":{"PortValue":60650}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3df4f2f3-a677-48af-afef-670a9d95b535","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ce87c9.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3df4f2f3-a677-48af-afef-670a9d95b535","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:60650","PortSpecifier":{"PortValue":60650}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783446359,"nanos":822439292},"http":{"id":"3df4f2f3-a677-48af-afef-670a9d95b535","method":"POST","headers":{":authority":"e2e-shared-b-ce87c9.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3df4f2f3-a677-48af-afef-670a9d95b535","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3df4f2f3-a677-48af-afef-670a9d95b535","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fe2d1374-3506-4595-ba2a-c54968aa7ca0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=837fe462-1f38-4836-a7b2-ac69beffdf31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c26313fcaa60"]}}
{"level":"debug","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3df4f2f3-a677-48af-afef-670a9d95b535","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c26313fcaa60"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=837fe462-1f38-4836-a7b2-ac69beffdf31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fe2d1374-3506-4595-ba2a-c54968aa7ca0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e0f8e20e049197b76ebeac4abe24f913efd1e862a1a1ff6ba439b4ecc04dfe06"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ce87c9.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3df4f2f3-a677-48af-afef-670a9d95b535","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3df4f2f3-a677-48af-afef-670a9d95b535","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3df4f2f3-a677-48af-afef-670a9d95b535","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ce87c9/sub-test-model-ce87c9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3df4f2f3-a677-48af-afef-670a9d95b535","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3df4f2f3-a677-48af-afef-670a9d95b535","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3df4f2f3-a677-48af-afef-670a9d95b535","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3df4f2f3-a677-48af-afef-670a9d95b535","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3df4f2f3-a677-48af-afef-670a9d95b535","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1725a16c-3018-4cfb-a3f2-005fa2368524","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:45354","PortSpecifier":{"PortValue":45354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1725a16c-3018-4cfb-a3f2-005fa2368524","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1725a16c-3018-4cfb-a3f2-005fa2368524","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:45354","PortSpecifier":{"PortValue":45354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783446359,"nanos":865124994},"http":{"id":"1725a16c-3018-4cfb-a3f2-005fa2368524","method":"GET","headers":{":authority":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1725a16c-3018-4cfb-a3f2-005fa2368524","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-igahf4iQH5FksrSa_vpcN4rCblQjQHLPUi91wv51d0D11DmUUoxHBSLi6C3i"}
{"level":"debug","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1725a16c-3018-4cfb-a3f2-005fa2368524","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-igahf4iQH5FksrSa_vpcN4rCblQjQHLPUi91wv51d0D11DmUUoxHBSLi6C3i\"}"}
{"level":"debug","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1725a16c-3018-4cfb-a3f2-005fa2368524","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a82d0dec-6999-4a51-85f6-15ba4e01ebb5","keyName":"e2e-sub-iso-9bee32","subscription":"e2e-a-only-9354fb","tenant":"e2e-shared-a-19c9b1","userId":"a82d0dec-6999-4a51-85f6-15ba4e01ebb5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1725a16c-3018-4cfb-a3f2-005fa2368524","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1725a16c-3018-4cfb-a3f2-005fa2368524","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1725a16c-3018-4cfb-a3f2-005fa2368524","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1725a16c-3018-4cfb-a3f2-005fa2368524","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-19c9b1/sub-test-model-19c9b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1725a16c-3018-4cfb-a3f2-005fa2368524","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1725a16c-3018-4cfb-a3f2-005fa2368524","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1725a16c-3018-4cfb-a3f2-005fa2368524","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-9354fb"}
{"level":"debug","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1725a16c-3018-4cfb-a3f2-005fa2368524","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1725a16c-3018-4cfb-a3f2-005fa2368524","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1725a16c-3018-4cfb-a3f2-005fa2368524","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"836c9f61-b90d-47c6-9fd0-4957554bf80b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:60666","PortSpecifier":{"PortValue":60666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"836c9f61-b90d-47c6-9fd0-4957554bf80b","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-ce87c9.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"836c9f61-b90d-47c6-9fd0-4957554bf80b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:60666","PortSpecifier":{"PortValue":60666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783446359,"nanos":907523632},"http":{"id":"836c9f61-b90d-47c6-9fd0-4957554bf80b","method":"GET","headers":{":authority":"e2e-shared-b-ce87c9.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"836c9f61-b90d-47c6-9fd0-4957554bf80b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-xn8qaqjJeaOhVfMW_gFX6eJsYvVJNKfXVwZnBDYfLIlNPLa2wDzpxEYMaGze"}
{"level":"debug","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"836c9f61-b90d-47c6-9fd0-4957554bf80b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-ce87c9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-xn8qaqjJeaOhVfMW_gFX6eJsYvVJNKfXVwZnBDYfLIlNPLa2wDzpxEYMaGze\"}"}
{"level":"debug","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"836c9f61-b90d-47c6-9fd0-4957554bf80b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-ce87c9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fff6052e-0ebd-489b-8e83-fa4519f09cff","keyName":"e2e-sub-iso-0c8e8b","subscription":"e2e-b-only-9354fb","tenant":"e2e-shared-b-ce87c9","userId":"fff6052e-0ebd-489b-8e83-fa4519f09cff","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"836c9f61-b90d-47c6-9fd0-4957554bf80b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"836c9f61-b90d-47c6-9fd0-4957554bf80b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"836c9f61-b90d-47c6-9fd0-4957554bf80b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"836c9f61-b90d-47c6-9fd0-4957554bf80b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ce87c9/sub-test-model-ce87c9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"836c9f61-b90d-47c6-9fd0-4957554bf80b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-9354fb"}
{"level":"debug","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"836c9f61-b90d-47c6-9fd0-4957554bf80b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"836c9f61-b90d-47c6-9fd0-4957554bf80b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"836c9f61-b90d-47c6-9fd0-4957554bf80b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"836c9f61-b90d-47c6-9fd0-4957554bf80b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T17:45:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"836c9f61-b90d-47c6-9fd0-4957554bf80b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2b5fbcc-d77e-4cba-9eab-0c4e84cc4c62","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:50556","PortSpecifier":{"PortValue":50556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b2b5fbcc-d77e-4cba-9eab-0c4e84cc4c62","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2b5fbcc-d77e-4cba-9eab-0c4e84cc4c62","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:50556","PortSpecifier":{"PortValue":50556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783446378,"nanos":553211509},"http":{"id":"b2b5fbcc-d77e-4cba-9eab-0c4e84cc4c62","method":"POST","headers":{":authority":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b2b5fbcc-d77e-4cba-9eab-0c4e84cc4c62","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b2b5fbcc-d77e-4cba-9eab-0c4e84cc4c62","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fe2d1374-3506-4595-ba2a-c54968aa7ca0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=837fe462-1f38-4836-a7b2-ac69beffdf31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c26313fcaa60"]}}
{"level":"debug","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b2b5fbcc-d77e-4cba-9eab-0c4e84cc4c62","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c26313fcaa60"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=837fe462-1f38-4836-a7b2-ac69beffdf31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fe2d1374-3506-4595-ba2a-c54968aa7ca0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ce6a24861f2e3d59dfe44943df9ca381d708e599247246eba240175ee5c6ffb0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2b5fbcc-d77e-4cba-9eab-0c4e84cc4c62","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2b5fbcc-d77e-4cba-9eab-0c4e84cc4c62","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2b5fbcc-d77e-4cba-9eab-0c4e84cc4c62","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-19c9b1/sub-test-model-19c9b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b2b5fbcc-d77e-4cba-9eab-0c4e84cc4c62","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2b5fbcc-d77e-4cba-9eab-0c4e84cc4c62","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2b5fbcc-d77e-4cba-9eab-0c4e84cc4c62","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2b5fbcc-d77e-4cba-9eab-0c4e84cc4c62","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2b5fbcc-d77e-4cba-9eab-0c4e84cc4c62","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8ab31d2-25f1-4bde-8dd6-7c6cd26e0cc0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:48790","PortSpecifier":{"PortValue":48790}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b8ab31d2-25f1-4bde-8dd6-7c6cd26e0cc0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ce87c9.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8ab31d2-25f1-4bde-8dd6-7c6cd26e0cc0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:48790","PortSpecifier":{"PortValue":48790}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783446378,"nanos":594893543},"http":{"id":"b8ab31d2-25f1-4bde-8dd6-7c6cd26e0cc0","method":"POST","headers":{":authority":"e2e-shared-b-ce87c9.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b8ab31d2-25f1-4bde-8dd6-7c6cd26e0cc0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b8ab31d2-25f1-4bde-8dd6-7c6cd26e0cc0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fe2d1374-3506-4595-ba2a-c54968aa7ca0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=837fe462-1f38-4836-a7b2-ac69beffdf31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c26313fcaa60"]}}
{"level":"debug","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b8ab31d2-25f1-4bde-8dd6-7c6cd26e0cc0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c26313fcaa60"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=837fe462-1f38-4836-a7b2-ac69beffdf31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fe2d1374-3506-4595-ba2a-c54968aa7ca0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e0f8e20e049197b76ebeac4abe24f913efd1e862a1a1ff6ba439b4ecc04dfe06"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ce87c9.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8ab31d2-25f1-4bde-8dd6-7c6cd26e0cc0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8ab31d2-25f1-4bde-8dd6-7c6cd26e0cc0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8ab31d2-25f1-4bde-8dd6-7c6cd26e0cc0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ce87c9/sub-test-model-ce87c9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b8ab31d2-25f1-4bde-8dd6-7c6cd26e0cc0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8ab31d2-25f1-4bde-8dd6-7c6cd26e0cc0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8ab31d2-25f1-4bde-8dd6-7c6cd26e0cc0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8ab31d2-25f1-4bde-8dd6-7c6cd26e0cc0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8ab31d2-25f1-4bde-8dd6-7c6cd26e0cc0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dde0fd7c-c580-42fc-9293-5975238f7196","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:50572","PortSpecifier":{"PortValue":50572}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dde0fd7c-c580-42fc-9293-5975238f7196","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dde0fd7c-c580-42fc-9293-5975238f7196","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:50572","PortSpecifier":{"PortValue":50572}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783446378,"nanos":636849756},"http":{"id":"dde0fd7c-c580-42fc-9293-5975238f7196","method":"POST","headers":{":authority":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dde0fd7c-c580-42fc-9293-5975238f7196","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-bjXhnDFnq33X8T6N_Pume8yUGbGwhPWcwX82x0Dddk4U2oU2x2O4ir3NoQaM"}
{"level":"debug","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dde0fd7c-c580-42fc-9293-5975238f7196","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-bjXhnDFnq33X8T6N_Pume8yUGbGwhPWcwX82x0Dddk4U2oU2x2O4ir3NoQaM\"}"}
{"level":"debug","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dde0fd7c-c580-42fc-9293-5975238f7196","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3dc89f64-7719-4948-a7d6-5f65cc534367","keyName":"e2e-sub-iso-a8b514","subscription":"e2e-shared-sub-468a96","tenant":"e2e-shared-a-19c9b1","userId":"3dc89f64-7719-4948-a7d6-5f65cc534367","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dde0fd7c-c580-42fc-9293-5975238f7196","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dde0fd7c-c580-42fc-9293-5975238f7196","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dde0fd7c-c580-42fc-9293-5975238f7196","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dde0fd7c-c580-42fc-9293-5975238f7196","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-19c9b1/sub-test-model-19c9b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dde0fd7c-c580-42fc-9293-5975238f7196","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dde0fd7c-c580-42fc-9293-5975238f7196","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dde0fd7c-c580-42fc-9293-5975238f7196","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-468a96"}
{"level":"debug","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dde0fd7c-c580-42fc-9293-5975238f7196","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dde0fd7c-c580-42fc-9293-5975238f7196","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dde0fd7c-c580-42fc-9293-5975238f7196","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f3e9111d-3475-4aa1-a98c-46023c232bac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:48798","PortSpecifier":{"PortValue":48798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f3e9111d-3475-4aa1-a98c-46023c232bac","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-ce87c9.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f3e9111d-3475-4aa1-a98c-46023c232bac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:48798","PortSpecifier":{"PortValue":48798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783446378,"nanos":667378653},"http":{"id":"f3e9111d-3475-4aa1-a98c-46023c232bac","method":"POST","headers":{":authority":"e2e-shared-b-ce87c9.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f3e9111d-3475-4aa1-a98c-46023c232bac","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1edWfndotrleNEPz0_PkYwI9hRQ5eLdbTcnZIovvgRqKuI06jfu93Q8zSgcfa"}
{"level":"debug","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f3e9111d-3475-4aa1-a98c-46023c232bac","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-ce87c9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1edWfndotrleNEPz0_PkYwI9hRQ5eLdbTcnZIovvgRqKuI06jfu93Q8zSgcfa\"}"}
{"level":"debug","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f3e9111d-3475-4aa1-a98c-46023c232bac","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-ce87c9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5f74c57f-abad-4997-9167-9c7a361a4e4a","keyName":"e2e-sub-iso-3abdbb","subscription":"e2e-shared-sub-468a96","tenant":"e2e-shared-b-ce87c9","userId":"5f74c57f-abad-4997-9167-9c7a361a4e4a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f3e9111d-3475-4aa1-a98c-46023c232bac","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3e9111d-3475-4aa1-a98c-46023c232bac","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3e9111d-3475-4aa1-a98c-46023c232bac","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3e9111d-3475-4aa1-a98c-46023c232bac","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ce87c9/sub-test-model-ce87c9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3e9111d-3475-4aa1-a98c-46023c232bac","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3e9111d-3475-4aa1-a98c-46023c232bac","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-468a96"}
{"level":"debug","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3e9111d-3475-4aa1-a98c-46023c232bac","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f3e9111d-3475-4aa1-a98c-46023c232bac","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f3e9111d-3475-4aa1-a98c-46023c232bac","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T17:46:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f3e9111d-3475-4aa1-a98c-46023c232bac","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T17:46:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1165a6fa710939e572ca3356bd3f774341aeb82f4d94d7c8a63900d5710c209f"}
{"level":"info","ts":"2026-07-07T17:46:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fcc8954c95c1f6a0f10eecdada7ae0c034122a608c4c244220264ab991e98385"}
{"level":"info","ts":"2026-07-07T17:46:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e16c8d5f13fdbde2b6d236eb23a3b7e9e22087b08c24316401c200079e5cc934"}
{"level":"info","ts":"2026-07-07T17:46:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00cda67ecd4915b2d14abe35cd8889d71f5e0775a0a3f249c297605d9f300ece"}
{"level":"info","ts":"2026-07-07T17:46:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f5b58077d07211395539dadd63b5fae6f370e51cd2e31ede2027ae9e53acfda"}
{"level":"info","ts":"2026-07-07T17:46:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b665b568579d8f0942d0dfce5b3551e74ad0e95bc92ee987aa78254efec28bb"}
{"level":"info","ts":"2026-07-07T17:46:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bbb668d62ed7d83caaa082b774443e629b4a48a5077b8a8630ba4c1f9e79a6cf"}
{"level":"info","ts":"2026-07-07T17:46:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0b7d2fbb4f1b1bfb5980c4fc50de774c0473bdc16f9c746a113675f74d37565"}
{"level":"info","ts":"2026-07-07T17:46:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/787b4992f13df17d06695a1d740e18e85ecd6e30f45655cf8c9b368eb2d9829f"}
{"level":"info","ts":"2026-07-07T17:46:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd8d640abec8061f3b3f81384a554e53f75156a507a69b6ae599af95b0afcc82"}
{"level":"info","ts":"2026-07-07T17:46:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b3539fdba924ea383df98e9f591560a451c5b76f15b5b8836c0c76903f0f2915"}
{"level":"info","ts":"2026-07-07T17:46:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/485801dacb82209a38ccd8afc9f49329df84de33c2948f7245fe061565c611b7"}
{"level":"info","ts":"2026-07-07T17:46:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e8b2cdd5de42025d0b0b791c5a332b6cf7646fef19fa47cec4bdc091acd600b1"}
{"level":"info","ts":"2026-07-07T17:46:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6cc1c6f503e2d547f4a1478a2056a974f9e596835de995689f1aee82536865c5"}
{"level":"info","ts":"2026-07-07T17:46:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/26b8c3e29c212518783457ac87e07bf3a031a446501497c807b74e8d9fdba340"}
{"level":"info","ts":"2026-07-07T17:46:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15c32b565bf67507f2ee1986156c4f8c73a7797bed8b20da9462f4a609675783"}
{"level":"debug","ts":"2026-07-07T17:46:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a33e88fb8a6bad06d34e77f290e999d360e20ee1485ebfa18dbce2ee297666f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:46:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:46:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:46:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a33e88fb8a6bad06d34e77f290e999d360e20ee1485ebfa18dbce2ee297666f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:46:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a33e88fb8a6bad06d34e77f290e999d360e20ee1485ebfa18dbce2ee297666f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:46:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a33e88fb8a6bad06d34e77f290e999d360e20ee1485ebfa18dbce2ee297666f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:46:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a33e88fb8a6bad06d34e77f290e999d360e20ee1485ebfa18dbce2ee297666f"}
{"level":"debug","ts":"2026-07-07T17:46:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a33e88fb8a6bad06d34e77f290e999d360e20ee1485ebfa18dbce2ee297666f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:46:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a33e88fb8a6bad06d34e77f290e999d360e20ee1485ebfa18dbce2ee297666f"}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a33e88fb8a6bad06d34e77f290e999d360e20ee1485ebfa18dbce2ee297666f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a33e88fb8a6bad06d34e77f290e999d360e20ee1485ebfa18dbce2ee297666f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a33e88fb8a6bad06d34e77f290e999d360e20ee1485ebfa18dbce2ee297666f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"221a9bd70341311fc5cc0dc86ae2f43461a4902d7bbbb6e9537fca0495b1bfc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/221a9bd70341311fc5cc0dc86ae2f43461a4902d7bbbb6e9537fca0495b1bfc9"}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"221a9bd70341311fc5cc0dc86ae2f43461a4902d7bbbb6e9537fca0495b1bfc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a33e88fb8a6bad06d34e77f290e999d360e20ee1485ebfa18dbce2ee297666f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a33e88fb8a6bad06d34e77f290e999d360e20ee1485ebfa18dbce2ee297666f"}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a33e88fb8a6bad06d34e77f290e999d360e20ee1485ebfa18dbce2ee297666f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1de2c521ad4d2f13175c4a163f70eaf72310b2388c3672e7c42a9b7df959a3de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1de2c521ad4d2f13175c4a163f70eaf72310b2388c3672e7c42a9b7df959a3de"}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1de2c521ad4d2f13175c4a163f70eaf72310b2388c3672e7c42a9b7df959a3de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"221a9bd70341311fc5cc0dc86ae2f43461a4902d7bbbb6e9537fca0495b1bfc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a33e88fb8a6bad06d34e77f290e999d360e20ee1485ebfa18dbce2ee297666f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a33e88fb8a6bad06d34e77f290e999d360e20ee1485ebfa18dbce2ee297666f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a33e88fb8a6bad06d34e77f290e999d360e20ee1485ebfa18dbce2ee297666f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1de2c521ad4d2f13175c4a163f70eaf72310b2388c3672e7c42a9b7df959a3de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1de2c521ad4d2f13175c4a163f70eaf72310b2388c3672e7c42a9b7df959a3de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/221a9bd70341311fc5cc0dc86ae2f43461a4902d7bbbb6e9537fca0495b1bfc9"}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1de2c521ad4d2f13175c4a163f70eaf72310b2388c3672e7c42a9b7df959a3de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"221a9bd70341311fc5cc0dc86ae2f43461a4902d7bbbb6e9537fca0495b1bfc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["221a9bd70341311fc5cc0dc86ae2f43461a4902d7bbbb6e9537fca0495b1bfc9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a33e88fb8a6bad06d34e77f290e999d360e20ee1485ebfa18dbce2ee297666f"}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"221a9bd70341311fc5cc0dc86ae2f43461a4902d7bbbb6e9537fca0495b1bfc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a33e88fb8a6bad06d34e77f290e999d360e20ee1485ebfa18dbce2ee297666f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1de2c521ad4d2f13175c4a163f70eaf72310b2388c3672e7c42a9b7df959a3de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1de2c521ad4d2f13175c4a163f70eaf72310b2388c3672e7c42a9b7df959a3de"}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1de2c521ad4d2f13175c4a163f70eaf72310b2388c3672e7c42a9b7df959a3de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"221a9bd70341311fc5cc0dc86ae2f43461a4902d7bbbb6e9537fca0495b1bfc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"221a9bd70341311fc5cc0dc86ae2f43461a4902d7bbbb6e9537fca0495b1bfc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1de2c521ad4d2f13175c4a163f70eaf72310b2388c3672e7c42a9b7df959a3de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1de2c521ad4d2f13175c4a163f70eaf72310b2388c3672e7c42a9b7df959a3de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/221a9bd70341311fc5cc0dc86ae2f43461a4902d7bbbb6e9537fca0495b1bfc9"}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1de2c521ad4d2f13175c4a163f70eaf72310b2388c3672e7c42a9b7df959a3de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"221a9bd70341311fc5cc0dc86ae2f43461a4902d7bbbb6e9537fca0495b1bfc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["221a9bd70341311fc5cc0dc86ae2f43461a4902d7bbbb6e9537fca0495b1bfc9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1de2c521ad4d2f13175c4a163f70eaf72310b2388c3672e7c42a9b7df959a3de"}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"221a9bd70341311fc5cc0dc86ae2f43461a4902d7bbbb6e9537fca0495b1bfc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1de2c521ad4d2f13175c4a163f70eaf72310b2388c3672e7c42a9b7df959a3de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"221a9bd70341311fc5cc0dc86ae2f43461a4902d7bbbb6e9537fca0495b1bfc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/221a9bd70341311fc5cc0dc86ae2f43461a4902d7bbbb6e9537fca0495b1bfc9"}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"221a9bd70341311fc5cc0dc86ae2f43461a4902d7bbbb6e9537fca0495b1bfc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"221a9bd70341311fc5cc0dc86ae2f43461a4902d7bbbb6e9537fca0495b1bfc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["221a9bd70341311fc5cc0dc86ae2f43461a4902d7bbbb6e9537fca0495b1bfc9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"221a9bd70341311fc5cc0dc86ae2f43461a4902d7bbbb6e9537fca0495b1bfc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"322586a5dae66b6b4722626aec3cbf7c7ce9b94039e8b76acef1b27f27b7b0f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1de2c521ad4d2f13175c4a163f70eaf72310b2388c3672e7c42a9b7df959a3de"}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"322586a5dae66b6b4722626aec3cbf7c7ce9b94039e8b76acef1b27f27b7b0f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"221a9bd70341311fc5cc0dc86ae2f43461a4902d7bbbb6e9537fca0495b1bfc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/221a9bd70341311fc5cc0dc86ae2f43461a4902d7bbbb6e9537fca0495b1bfc9"}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"221a9bd70341311fc5cc0dc86ae2f43461a4902d7bbbb6e9537fca0495b1bfc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"322586a5dae66b6b4722626aec3cbf7c7ce9b94039e8b76acef1b27f27b7b0f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/322586a5dae66b6b4722626aec3cbf7c7ce9b94039e8b76acef1b27f27b7b0f2"}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"322586a5dae66b6b4722626aec3cbf7c7ce9b94039e8b76acef1b27f27b7b0f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"221a9bd70341311fc5cc0dc86ae2f43461a4902d7bbbb6e9537fca0495b1bfc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"322586a5dae66b6b4722626aec3cbf7c7ce9b94039e8b76acef1b27f27b7b0f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["322586a5dae66b6b4722626aec3cbf7c7ce9b94039e8b76acef1b27f27b7b0f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/221a9bd70341311fc5cc0dc86ae2f43461a4902d7bbbb6e9537fca0495b1bfc9"}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"322586a5dae66b6b4722626aec3cbf7c7ce9b94039e8b76acef1b27f27b7b0f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"221a9bd70341311fc5cc0dc86ae2f43461a4902d7bbbb6e9537fca0495b1bfc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["221a9bd70341311fc5cc0dc86ae2f43461a4902d7bbbb6e9537fca0495b1bfc9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"221a9bd70341311fc5cc0dc86ae2f43461a4902d7bbbb6e9537fca0495b1bfc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"322586a5dae66b6b4722626aec3cbf7c7ce9b94039e8b76acef1b27f27b7b0f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/322586a5dae66b6b4722626aec3cbf7c7ce9b94039e8b76acef1b27f27b7b0f2"}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"322586a5dae66b6b4722626aec3cbf7c7ce9b94039e8b76acef1b27f27b7b0f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"221a9bd70341311fc5cc0dc86ae2f43461a4902d7bbbb6e9537fca0495b1bfc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/221a9bd70341311fc5cc0dc86ae2f43461a4902d7bbbb6e9537fca0495b1bfc9"}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"221a9bd70341311fc5cc0dc86ae2f43461a4902d7bbbb6e9537fca0495b1bfc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1711770c354883dcc1cb93d0d03a753703b46da1c1ce46eeb1a2bda55e55b4dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1711770c354883dcc1cb93d0d03a753703b46da1c1ce46eeb1a2bda55e55b4dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"322586a5dae66b6b4722626aec3cbf7c7ce9b94039e8b76acef1b27f27b7b0f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["322586a5dae66b6b4722626aec3cbf7c7ce9b94039e8b76acef1b27f27b7b0f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1711770c354883dcc1cb93d0d03a753703b46da1c1ce46eeb1a2bda55e55b4dd"}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"322586a5dae66b6b4722626aec3cbf7c7ce9b94039e8b76acef1b27f27b7b0f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"221a9bd70341311fc5cc0dc86ae2f43461a4902d7bbbb6e9537fca0495b1bfc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["221a9bd70341311fc5cc0dc86ae2f43461a4902d7bbbb6e9537fca0495b1bfc9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/322586a5dae66b6b4722626aec3cbf7c7ce9b94039e8b76acef1b27f27b7b0f2"}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"221a9bd70341311fc5cc0dc86ae2f43461a4902d7bbbb6e9537fca0495b1bfc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1711770c354883dcc1cb93d0d03a753703b46da1c1ce46eeb1a2bda55e55b4dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1711770c354883dcc1cb93d0d03a753703b46da1c1ce46eeb1a2bda55e55b4dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/221a9bd70341311fc5cc0dc86ae2f43461a4902d7bbbb6e9537fca0495b1bfc9"}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1711770c354883dcc1cb93d0d03a753703b46da1c1ce46eeb1a2bda55e55b4dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"322586a5dae66b6b4722626aec3cbf7c7ce9b94039e8b76acef1b27f27b7b0f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"221a9bd70341311fc5cc0dc86ae2f43461a4902d7bbbb6e9537fca0495b1bfc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1711770c354883dcc1cb93d0d03a753703b46da1c1ce46eeb1a2bda55e55b4dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1711770c354883dcc1cb93d0d03a753703b46da1c1ce46eeb1a2bda55e55b4dd"}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1711770c354883dcc1cb93d0d03a753703b46da1c1ce46eeb1a2bda55e55b4dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73b5c4a83f30d3e11ab6ee2d6681e8ac53330e37c3bc51d5d25c29d25aa064c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/322586a5dae66b6b4722626aec3cbf7c7ce9b94039e8b76acef1b27f27b7b0f2"}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73b5c4a83f30d3e11ab6ee2d6681e8ac53330e37c3bc51d5d25c29d25aa064c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1711770c354883dcc1cb93d0d03a753703b46da1c1ce46eeb1a2bda55e55b4dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1711770c354883dcc1cb93d0d03a753703b46da1c1ce46eeb1a2bda55e55b4dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1711770c354883dcc1cb93d0d03a753703b46da1c1ce46eeb1a2bda55e55b4dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73b5c4a83f30d3e11ab6ee2d6681e8ac53330e37c3bc51d5d25c29d25aa064c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1711770c354883dcc1cb93d0d03a753703b46da1c1ce46eeb1a2bda55e55b4dd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/221a9bd70341311fc5cc0dc86ae2f43461a4902d7bbbb6e9537fca0495b1bfc9"}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73b5c4a83f30d3e11ab6ee2d6681e8ac53330e37c3bc51d5d25c29d25aa064c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73b5c4a83f30d3e11ab6ee2d6681e8ac53330e37c3bc51d5d25c29d25aa064c6"}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73b5c4a83f30d3e11ab6ee2d6681e8ac53330e37c3bc51d5d25c29d25aa064c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73b5c4a83f30d3e11ab6ee2d6681e8ac53330e37c3bc51d5d25c29d25aa064c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73b5c4a83f30d3e11ab6ee2d6681e8ac53330e37c3bc51d5d25c29d25aa064c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73b5c4a83f30d3e11ab6ee2d6681e8ac53330e37c3bc51d5d25c29d25aa064c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73b5c4a83f30d3e11ab6ee2d6681e8ac53330e37c3bc51d5d25c29d25aa064c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1711770c354883dcc1cb93d0d03a753703b46da1c1ce46eeb1a2bda55e55b4dd"}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73b5c4a83f30d3e11ab6ee2d6681e8ac53330e37c3bc51d5d25c29d25aa064c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73b5c4a83f30d3e11ab6ee2d6681e8ac53330e37c3bc51d5d25c29d25aa064c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9ebfcb56afbb067c20781282a3a25e427d64ac1f133062212f269f94775542e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73b5c4a83f30d3e11ab6ee2d6681e8ac53330e37c3bc51d5d25c29d25aa064c6"}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9ebfcb56afbb067c20781282a3a25e427d64ac1f133062212f269f94775542e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73b5c4a83f30d3e11ab6ee2d6681e8ac53330e37c3bc51d5d25c29d25aa064c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73b5c4a83f30d3e11ab6ee2d6681e8ac53330e37c3bc51d5d25c29d25aa064c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9ebfcb56afbb067c20781282a3a25e427d64ac1f133062212f269f94775542e"}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73b5c4a83f30d3e11ab6ee2d6681e8ac53330e37c3bc51d5d25c29d25aa064c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9ebfcb56afbb067c20781282a3a25e427d64ac1f133062212f269f94775542e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9ebfcb56afbb067c20781282a3a25e427d64ac1f133062212f269f94775542e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9ebfcb56afbb067c20781282a3a25e427d64ac1f133062212f269f94775542e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73b5c4a83f30d3e11ab6ee2d6681e8ac53330e37c3bc51d5d25c29d25aa064c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73b5c4a83f30d3e11ab6ee2d6681e8ac53330e37c3bc51d5d25c29d25aa064c6"}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73b5c4a83f30d3e11ab6ee2d6681e8ac53330e37c3bc51d5d25c29d25aa064c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9ebfcb56afbb067c20781282a3a25e427d64ac1f133062212f269f94775542e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9ebfcb56afbb067c20781282a3a25e427d64ac1f133062212f269f94775542e"}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9ebfcb56afbb067c20781282a3a25e427d64ac1f133062212f269f94775542e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73b5c4a83f30d3e11ab6ee2d6681e8ac53330e37c3bc51d5d25c29d25aa064c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9ebfcb56afbb067c20781282a3a25e427d64ac1f133062212f269f94775542e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9ebfcb56afbb067c20781282a3a25e427d64ac1f133062212f269f94775542e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73b5c4a83f30d3e11ab6ee2d6681e8ac53330e37c3bc51d5d25c29d25aa064c6"}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9ebfcb56afbb067c20781282a3a25e427d64ac1f133062212f269f94775542e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2075297ed7421c5919479862eaa011c0cb7cd93e5f7a6db054e83dd768a2ad0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2075297ed7421c5919479862eaa011c0cb7cd93e5f7a6db054e83dd768a2ad0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73b5c4a83f30d3e11ab6ee2d6681e8ac53330e37c3bc51d5d25c29d25aa064c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73b5c4a83f30d3e11ab6ee2d6681e8ac53330e37c3bc51d5d25c29d25aa064c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9ebfcb56afbb067c20781282a3a25e427d64ac1f133062212f269f94775542e"}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73b5c4a83f30d3e11ab6ee2d6681e8ac53330e37c3bc51d5d25c29d25aa064c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9ebfcb56afbb067c20781282a3a25e427d64ac1f133062212f269f94775542e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2075297ed7421c5919479862eaa011c0cb7cd93e5f7a6db054e83dd768a2ad0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2075297ed7421c5919479862eaa011c0cb7cd93e5f7a6db054e83dd768a2ad0"}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2075297ed7421c5919479862eaa011c0cb7cd93e5f7a6db054e83dd768a2ad0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73b5c4a83f30d3e11ab6ee2d6681e8ac53330e37c3bc51d5d25c29d25aa064c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2075297ed7421c5919479862eaa011c0cb7cd93e5f7a6db054e83dd768a2ad0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2075297ed7421c5919479862eaa011c0cb7cd93e5f7a6db054e83dd768a2ad0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9ebfcb56afbb067c20781282a3a25e427d64ac1f133062212f269f94775542e"}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2075297ed7421c5919479862eaa011c0cb7cd93e5f7a6db054e83dd768a2ad0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2075297ed7421c5919479862eaa011c0cb7cd93e5f7a6db054e83dd768a2ad0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:46:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2075297ed7421c5919479862eaa011c0cb7cd93e5f7a6db054e83dd768a2ad0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f2075297ed7421c5919479862eaa011c0cb7cd93e5f7a6db054e83dd768a2ad0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f2075297ed7421c5919479862eaa011c0cb7cd93e5f7a6db054e83dd768a2ad0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2075297ed7421c5919479862eaa011c0cb7cd93e5f7a6db054e83dd768a2ad0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2075297ed7421c5919479862eaa011c0cb7cd93e5f7a6db054e83dd768a2ad0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73b5c4a83f30d3e11ab6ee2d6681e8ac53330e37c3bc51d5d25c29d25aa064c6"}
{"level":"info","ts":"2026-07-07T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2075297ed7421c5919479862eaa011c0cb7cd93e5f7a6db054e83dd768a2ad0"}
{"level":"debug","ts":"2026-07-07T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e35dd82c5f507a8ec7a0c3addde269457b4ed249572e80e8920fa3b1ecacdcda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:47:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e35dd82c5f507a8ec7a0c3addde269457b4ed249572e80e8920fa3b1ecacdcda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e35dd82c5f507a8ec7a0c3addde269457b4ed249572e80e8920fa3b1ecacdcda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e35dd82c5f507a8ec7a0c3addde269457b4ed249572e80e8920fa3b1ecacdcda"}
{"level":"info","ts":"2026-07-07T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e35dd82c5f507a8ec7a0c3addde269457b4ed249572e80e8920fa3b1ecacdcda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e35dd82c5f507a8ec7a0c3addde269457b4ed249572e80e8920fa3b1ecacdcda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e35dd82c5f507a8ec7a0c3addde269457b4ed249572e80e8920fa3b1ecacdcda"}
{"level":"error","ts":"2026-07-07T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e35dd82c5f507a8ec7a0c3addde269457b4ed249572e80e8920fa3b1ecacdcda","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e35dd82c5f507a8ec7a0c3addde269457b4ed249572e80e8920fa3b1ecacdcda\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e35dd82c5f507a8ec7a0c3addde269457b4ed249572e80e8920fa3b1ecacdcda","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e35dd82c5f507a8ec7a0c3addde269457b4ed249572e80e8920fa3b1ecacdcda"}
{"level":"debug","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e35dd82c5f507a8ec7a0c3addde269457b4ed249572e80e8920fa3b1ecacdcda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e35dd82c5f507a8ec7a0c3addde269457b4ed249572e80e8920fa3b1ecacdcda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e35dd82c5f507a8ec7a0c3addde269457b4ed249572e80e8920fa3b1ecacdcda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e35dd82c5f507a8ec7a0c3addde269457b4ed249572e80e8920fa3b1ecacdcda","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e35dd82c5f507a8ec7a0c3addde269457b4ed249572e80e8920fa3b1ecacdcda"}
{"level":"debug","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e2f8ee94fdcc577ae36273e7865ddc6628e7978cecea31e36afaabaa73f59e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:47:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e2f8ee94fdcc577ae36273e7865ddc6628e7978cecea31e36afaabaa73f59e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e2f8ee94fdcc577ae36273e7865ddc6628e7978cecea31e36afaabaa73f59e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e2f8ee94fdcc577ae36273e7865ddc6628e7978cecea31e36afaabaa73f59e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e2f8ee94fdcc577ae36273e7865ddc6628e7978cecea31e36afaabaa73f59e7"}
{"level":"debug","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e2f8ee94fdcc577ae36273e7865ddc6628e7978cecea31e36afaabaa73f59e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e2f8ee94fdcc577ae36273e7865ddc6628e7978cecea31e36afaabaa73f59e7"}
{"level":"debug","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e2f8ee94fdcc577ae36273e7865ddc6628e7978cecea31e36afaabaa73f59e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e2f8ee94fdcc577ae36273e7865ddc6628e7978cecea31e36afaabaa73f59e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e2f8ee94fdcc577ae36273e7865ddc6628e7978cecea31e36afaabaa73f59e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e2f8ee94fdcc577ae36273e7865ddc6628e7978cecea31e36afaabaa73f59e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:47:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e2f8ee94fdcc577ae36273e7865ddc6628e7978cecea31e36afaabaa73f59e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e2f8ee94fdcc577ae36273e7865ddc6628e7978cecea31e36afaabaa73f59e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e2f8ee94fdcc577ae36273e7865ddc6628e7978cecea31e36afaabaa73f59e7"}
{"level":"debug","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e2f8ee94fdcc577ae36273e7865ddc6628e7978cecea31e36afaabaa73f59e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e2f8ee94fdcc577ae36273e7865ddc6628e7978cecea31e36afaabaa73f59e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e2f8ee94fdcc577ae36273e7865ddc6628e7978cecea31e36afaabaa73f59e7"}
{"level":"debug","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e2f8ee94fdcc577ae36273e7865ddc6628e7978cecea31e36afaabaa73f59e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e2f8ee94fdcc577ae36273e7865ddc6628e7978cecea31e36afaabaa73f59e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e2f8ee94fdcc577ae36273e7865ddc6628e7978cecea31e36afaabaa73f59e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e2f8ee94fdcc577ae36273e7865ddc6628e7978cecea31e36afaabaa73f59e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e2f8ee94fdcc577ae36273e7865ddc6628e7978cecea31e36afaabaa73f59e7"}
{"level":"debug","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"597c93ad52d13f8f9546c1f288952a470b1cbaa119def99c8ff4f25164de8787","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:47:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"597c93ad52d13f8f9546c1f288952a470b1cbaa119def99c8ff4f25164de8787","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"597c93ad52d13f8f9546c1f288952a470b1cbaa119def99c8ff4f25164de8787","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"597c93ad52d13f8f9546c1f288952a470b1cbaa119def99c8ff4f25164de8787","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/597c93ad52d13f8f9546c1f288952a470b1cbaa119def99c8ff4f25164de8787"}
{"level":"debug","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"597c93ad52d13f8f9546c1f288952a470b1cbaa119def99c8ff4f25164de8787","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/597c93ad52d13f8f9546c1f288952a470b1cbaa119def99c8ff4f25164de8787"}
{"level":"debug","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"597c93ad52d13f8f9546c1f288952a470b1cbaa119def99c8ff4f25164de8787","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["597c93ad52d13f8f9546c1f288952a470b1cbaa119def99c8ff4f25164de8787"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"597c93ad52d13f8f9546c1f288952a470b1cbaa119def99c8ff4f25164de8787","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"597c93ad52d13f8f9546c1f288952a470b1cbaa119def99c8ff4f25164de8787","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:47:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"597c93ad52d13f8f9546c1f288952a470b1cbaa119def99c8ff4f25164de8787","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:47:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/597c93ad52d13f8f9546c1f288952a470b1cbaa119def99c8ff4f25164de8787"}
{"level":"info","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"597c93ad52d13f8f9546c1f288952a470b1cbaa119def99c8ff4f25164de8787","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["597c93ad52d13f8f9546c1f288952a470b1cbaa119def99c8ff4f25164de8787"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed"}
{"level":"info","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"597c93ad52d13f8f9546c1f288952a470b1cbaa119def99c8ff4f25164de8787","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/597c93ad52d13f8f9546c1f288952a470b1cbaa119def99c8ff4f25164de8787"}
{"level":"info","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"597c93ad52d13f8f9546c1f288952a470b1cbaa119def99c8ff4f25164de8787","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:47:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed"}
{"level":"info","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/597c93ad52d13f8f9546c1f288952a470b1cbaa119def99c8ff4f25164de8787"}
{"level":"info","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31d806710f35ce7ff75094aab8c317a486fcc45cef199a7196efeaddfad777ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:47:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31d806710f35ce7ff75094aab8c317a486fcc45cef199a7196efeaddfad777ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:47:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed"}
{"level":"info","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31d806710f35ce7ff75094aab8c317a486fcc45cef199a7196efeaddfad777ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:47:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31d806710f35ce7ff75094aab8c317a486fcc45cef199a7196efeaddfad777ef"}
{"level":"info","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31d806710f35ce7ff75094aab8c317a486fcc45cef199a7196efeaddfad777ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31d806710f35ce7ff75094aab8c317a486fcc45cef199a7196efeaddfad777ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31d806710f35ce7ff75094aab8c317a486fcc45cef199a7196efeaddfad777ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed"}
{"level":"info","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31d806710f35ce7ff75094aab8c317a486fcc45cef199a7196efeaddfad777ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:47:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:47:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31d806710f35ce7ff75094aab8c317a486fcc45cef199a7196efeaddfad777ef"}
{"level":"info","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31d806710f35ce7ff75094aab8c317a486fcc45cef199a7196efeaddfad777ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:47:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:47:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31d806710f35ce7ff75094aab8c317a486fcc45cef199a7196efeaddfad777ef"}
{"level":"info","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31d806710f35ce7ff75094aab8c317a486fcc45cef199a7196efeaddfad777ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:47:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:47:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebe092ef797333c678bf90cc592fa1b8100c05b1a652e3720595563b89dcc442","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:47:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:47:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed"}
{"level":"info","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebe092ef797333c678bf90cc592fa1b8100c05b1a652e3720595563b89dcc442","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31d806710f35ce7ff75094aab8c317a486fcc45cef199a7196efeaddfad777ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:47:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:47:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31d806710f35ce7ff75094aab8c317a486fcc45cef199a7196efeaddfad777ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebe092ef797333c678bf90cc592fa1b8100c05b1a652e3720595563b89dcc442"}
{"level":"info","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31d806710f35ce7ff75094aab8c317a486fcc45cef199a7196efeaddfad777ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:47:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:47:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31d806710f35ce7ff75094aab8c317a486fcc45cef199a7196efeaddfad777ef"}
{"level":"info","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebe092ef797333c678bf90cc592fa1b8100c05b1a652e3720595563b89dcc442","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:47:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:47:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebe092ef797333c678bf90cc592fa1b8100c05b1a652e3720595563b89dcc442"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed"}
{"level":"info","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebe092ef797333c678bf90cc592fa1b8100c05b1a652e3720595563b89dcc442","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31d806710f35ce7ff75094aab8c317a486fcc45cef199a7196efeaddfad777ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebe092ef797333c678bf90cc592fa1b8100c05b1a652e3720595563b89dcc442","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:47:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:47:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebe092ef797333c678bf90cc592fa1b8100c05b1a652e3720595563b89dcc442"}
{"level":"info","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebe092ef797333c678bf90cc592fa1b8100c05b1a652e3720595563b89dcc442","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebe092ef797333c678bf90cc592fa1b8100c05b1a652e3720595563b89dcc442","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:47:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:47:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebe092ef797333c678bf90cc592fa1b8100c05b1a652e3720595563b89dcc442"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31d806710f35ce7ff75094aab8c317a486fcc45cef199a7196efeaddfad777ef"}
{"level":"info","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebe092ef797333c678bf90cc592fa1b8100c05b1a652e3720595563b89dcc442","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebe092ef797333c678bf90cc592fa1b8100c05b1a652e3720595563b89dcc442","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:47:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:47:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebe092ef797333c678bf90cc592fa1b8100c05b1a652e3720595563b89dcc442"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ebe092ef797333c678bf90cc592fa1b8100c05b1a652e3720595563b89dcc442","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ebe092ef797333c678bf90cc592fa1b8100c05b1a652e3720595563b89dcc442\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebe092ef797333c678bf90cc592fa1b8100c05b1a652e3720595563b89dcc442","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed"}
{"level":"debug","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebe092ef797333c678bf90cc592fa1b8100c05b1a652e3720595563b89dcc442","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:47:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:47:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebe092ef797333c678bf90cc592fa1b8100c05b1a652e3720595563b89dcc442"}
{"level":"info","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebe092ef797333c678bf90cc592fa1b8100c05b1a652e3720595563b89dcc442","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebe092ef797333c678bf90cc592fa1b8100c05b1a652e3720595563b89dcc442","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebe092ef797333c678bf90cc592fa1b8100c05b1a652e3720595563b89dcc442","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebe092ef797333c678bf90cc592fa1b8100c05b1a652e3720595563b89dcc442"}
{"level":"debug","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebe092ef797333c678bf90cc592fa1b8100c05b1a652e3720595563b89dcc442","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:47:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:47:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebe092ef797333c678bf90cc592fa1b8100c05b1a652e3720595563b89dcc442"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebe092ef797333c678bf90cc592fa1b8100c05b1a652e3720595563b89dcc442","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebe092ef797333c678bf90cc592fa1b8100c05b1a652e3720595563b89dcc442","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebe092ef797333c678bf90cc592fa1b8100c05b1a652e3720595563b89dcc442"}
{"level":"debug","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2616a94aed0781c95a8b1dadc81e4317fa9558b2ccf4637f4b7332de68035f14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:47:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:47:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2616a94aed0781c95a8b1dadc81e4317fa9558b2ccf4637f4b7332de68035f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:47:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:47:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2616a94aed0781c95a8b1dadc81e4317fa9558b2ccf4637f4b7332de68035f14"}
{"level":"info","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2616a94aed0781c95a8b1dadc81e4317fa9558b2ccf4637f4b7332de68035f14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:47:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:47:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2616a94aed0781c95a8b1dadc81e4317fa9558b2ccf4637f4b7332de68035f14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1"}
{"level":"info","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2616a94aed0781c95a8b1dadc81e4317fa9558b2ccf4637f4b7332de68035f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:47:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:47:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2616a94aed0781c95a8b1dadc81e4317fa9558b2ccf4637f4b7332de68035f14"}
{"level":"info","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2616a94aed0781c95a8b1dadc81e4317fa9558b2ccf4637f4b7332de68035f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:47:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:47:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1"}
{"level":"info","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:47:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:47:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2616a94aed0781c95a8b1dadc81e4317fa9558b2ccf4637f4b7332de68035f14"}
{"level":"info","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:47:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:47:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:47:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:47:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1"}
{"level":"error","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1"}
{"level":"debug","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:47:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:47:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1"}
{"level":"debug","ts":"2026-07-07T17:47:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1711770c354883dcc1cb93d0d03a753703b46da1c1ce46eeb1a2bda55e55b4dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:47:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:47:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1711770c354883dcc1cb93d0d03a753703b46da1c1ce46eeb1a2bda55e55b4dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1711770c354883dcc1cb93d0d03a753703b46da1c1ce46eeb1a2bda55e55b4dd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:47:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1711770c354883dcc1cb93d0d03a753703b46da1c1ce46eeb1a2bda55e55b4dd"}
{"level":"debug","ts":"2026-07-07T17:47:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1711770c354883dcc1cb93d0d03a753703b46da1c1ce46eeb1a2bda55e55b4dd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:47:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1711770c354883dcc1cb93d0d03a753703b46da1c1ce46eeb1a2bda55e55b4dd"}
{"level":"debug","ts":"2026-07-07T17:47:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1711770c354883dcc1cb93d0d03a753703b46da1c1ce46eeb1a2bda55e55b4dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:47:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:47:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1711770c354883dcc1cb93d0d03a753703b46da1c1ce46eeb1a2bda55e55b4dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1711770c354883dcc1cb93d0d03a753703b46da1c1ce46eeb1a2bda55e55b4dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1711770c354883dcc1cb93d0d03a753703b46da1c1ce46eeb1a2bda55e55b4dd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:47:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1711770c354883dcc1cb93d0d03a753703b46da1c1ce46eeb1a2bda55e55b4dd"}
{"level":"debug","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0f8e20e049197b76ebeac4abe24f913efd1e862a1a1ff6ba439b4ecc04dfe06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0f8e20e049197b76ebeac4abe24f913efd1e862a1a1ff6ba439b4ecc04dfe06"}
{"level":"debug","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"322586a5dae66b6b4722626aec3cbf7c7ce9b94039e8b76acef1b27f27b7b0f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:47:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:47:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"322586a5dae66b6b4722626aec3cbf7c7ce9b94039e8b76acef1b27f27b7b0f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"322586a5dae66b6b4722626aec3cbf7c7ce9b94039e8b76acef1b27f27b7b0f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"322586a5dae66b6b4722626aec3cbf7c7ce9b94039e8b76acef1b27f27b7b0f2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/322586a5dae66b6b4722626aec3cbf7c7ce9b94039e8b76acef1b27f27b7b0f2"}
{"level":"debug","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"322586a5dae66b6b4722626aec3cbf7c7ce9b94039e8b76acef1b27f27b7b0f2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/322586a5dae66b6b4722626aec3cbf7c7ce9b94039e8b76acef1b27f27b7b0f2"}
{"level":"debug","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1e7b3a36be8c501c2188990da07a0ec67d60ec50ce7566c918eb44876872137","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"322586a5dae66b6b4722626aec3cbf7c7ce9b94039e8b76acef1b27f27b7b0f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:47:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:47:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["322586a5dae66b6b4722626aec3cbf7c7ce9b94039e8b76acef1b27f27b7b0f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1e7b3a36be8c501c2188990da07a0ec67d60ec50ce7566c918eb44876872137"}
{"level":"info","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"322586a5dae66b6b4722626aec3cbf7c7ce9b94039e8b76acef1b27f27b7b0f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"322586a5dae66b6b4722626aec3cbf7c7ce9b94039e8b76acef1b27f27b7b0f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:47:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:47:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"322586a5dae66b6b4722626aec3cbf7c7ce9b94039e8b76acef1b27f27b7b0f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"322586a5dae66b6b4722626aec3cbf7c7ce9b94039e8b76acef1b27f27b7b0f2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/322586a5dae66b6b4722626aec3cbf7c7ce9b94039e8b76acef1b27f27b7b0f2"}
{"level":"debug","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"322586a5dae66b6b4722626aec3cbf7c7ce9b94039e8b76acef1b27f27b7b0f2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/322586a5dae66b6b4722626aec3cbf7c7ce9b94039e8b76acef1b27f27b7b0f2"}
{"level":"debug","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"322586a5dae66b6b4722626aec3cbf7c7ce9b94039e8b76acef1b27f27b7b0f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:47:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:47:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["322586a5dae66b6b4722626aec3cbf7c7ce9b94039e8b76acef1b27f27b7b0f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"322586a5dae66b6b4722626aec3cbf7c7ce9b94039e8b76acef1b27f27b7b0f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31d806710f35ce7ff75094aab8c317a486fcc45cef199a7196efeaddfad777ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"322586a5dae66b6b4722626aec3cbf7c7ce9b94039e8b76acef1b27f27b7b0f2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31d806710f35ce7ff75094aab8c317a486fcc45cef199a7196efeaddfad777ef"}
{"level":"info","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/322586a5dae66b6b4722626aec3cbf7c7ce9b94039e8b76acef1b27f27b7b0f2"}
{"level":"debug","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c50221d222fb7b8ff4e11098df6b62d7b0c78ec2bc8847434de1ac76313f7c8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c50221d222fb7b8ff4e11098df6b62d7b0c78ec2bc8847434de1ac76313f7c8"}
{"level":"debug","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:47:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:47:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed"}
{"level":"debug","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed"}
{"level":"debug","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:47:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:47:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"597c93ad52d13f8f9546c1f288952a470b1cbaa119def99c8ff4f25164de8787","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:47:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:47:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/597c93ad52d13f8f9546c1f288952a470b1cbaa119def99c8ff4f25164de8787"}
{"level":"info","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"597c93ad52d13f8f9546c1f288952a470b1cbaa119def99c8ff4f25164de8787","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:47:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:47:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed"}
{"level":"info","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"597c93ad52d13f8f9546c1f288952a470b1cbaa119def99c8ff4f25164de8787","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:47:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:47:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/597c93ad52d13f8f9546c1f288952a470b1cbaa119def99c8ff4f25164de8787"}
{"level":"info","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"597c93ad52d13f8f9546c1f288952a470b1cbaa119def99c8ff4f25164de8787","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:47:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:47:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["597c93ad52d13f8f9546c1f288952a470b1cbaa119def99c8ff4f25164de8787"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed"}
{"level":"info","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"597c93ad52d13f8f9546c1f288952a470b1cbaa119def99c8ff4f25164de8787","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:47:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:47:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed"}
{"level":"info","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"597c93ad52d13f8f9546c1f288952a470b1cbaa119def99c8ff4f25164de8787","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:47:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:47:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/597c93ad52d13f8f9546c1f288952a470b1cbaa119def99c8ff4f25164de8787"}
{"level":"info","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"597c93ad52d13f8f9546c1f288952a470b1cbaa119def99c8ff4f25164de8787","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"597c93ad52d13f8f9546c1f288952a470b1cbaa119def99c8ff4f25164de8787","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:47:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:47:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["597c93ad52d13f8f9546c1f288952a470b1cbaa119def99c8ff4f25164de8787"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed"}
{"level":"info","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"597c93ad52d13f8f9546c1f288952a470b1cbaa119def99c8ff4f25164de8787","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:47:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:47:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/597c93ad52d13f8f9546c1f288952a470b1cbaa119def99c8ff4f25164de8787"}
{"level":"info","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"597c93ad52d13f8f9546c1f288952a470b1cbaa119def99c8ff4f25164de8787","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:47:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:47:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/597c93ad52d13f8f9546c1f288952a470b1cbaa119def99c8ff4f25164de8787"}
{"level":"info","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"597c93ad52d13f8f9546c1f288952a470b1cbaa119def99c8ff4f25164de8787","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:47:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:47:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed"}
{"level":"info","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:47:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:47:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1"}
{"level":"info","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"597c93ad52d13f8f9546c1f288952a470b1cbaa119def99c8ff4f25164de8787","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:47:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:47:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/597c93ad52d13f8f9546c1f288952a470b1cbaa119def99c8ff4f25164de8787"}
{"level":"info","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:47:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:47:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed"}
{"level":"info","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"597c93ad52d13f8f9546c1f288952a470b1cbaa119def99c8ff4f25164de8787","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:47:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:47:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["597c93ad52d13f8f9546c1f288952a470b1cbaa119def99c8ff4f25164de8787"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1"}
{"level":"info","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"597c93ad52d13f8f9546c1f288952a470b1cbaa119def99c8ff4f25164de8787","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:47:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:47:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed"}
{"level":"info","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:47:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:47:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1"}
{"level":"info","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"597c93ad52d13f8f9546c1f288952a470b1cbaa119def99c8ff4f25164de8787","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:47:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:47:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"597c93ad52d13f8f9546c1f288952a470b1cbaa119def99c8ff4f25164de8787","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee5c8259cb0c30598dbdb5dc2df20f5a44ba138c5da30bfe6cabf955e681707d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:47:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:47:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/597c93ad52d13f8f9546c1f288952a470b1cbaa119def99c8ff4f25164de8787"}
{"level":"info","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:47:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:47:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee5c8259cb0c30598dbdb5dc2df20f5a44ba138c5da30bfe6cabf955e681707d"}
{"level":"info","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"597c93ad52d13f8f9546c1f288952a470b1cbaa119def99c8ff4f25164de8787","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:47:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:47:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["597c93ad52d13f8f9546c1f288952a470b1cbaa119def99c8ff4f25164de8787"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed"}
{"level":"info","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"597c93ad52d13f8f9546c1f288952a470b1cbaa119def99c8ff4f25164de8787","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"442d566dec4dad9158d3574e413880479effad04ebc5220720f2ee87a5f9fab6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:47:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:47:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1"}
{"level":"info","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/597c93ad52d13f8f9546c1f288952a470b1cbaa119def99c8ff4f25164de8787"}
{"level":"info","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"597c93ad52d13f8f9546c1f288952a470b1cbaa119def99c8ff4f25164de8787","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e2f8ee94fdcc577ae36273e7865ddc6628e7978cecea31e36afaabaa73f59e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:47:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:47:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/442d566dec4dad9158d3574e413880479effad04ebc5220720f2ee87a5f9fab6"}
{"level":"info","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:47:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:47:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1"}
{"level":"info","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e2f8ee94fdcc577ae36273e7865ddc6628e7978cecea31e36afaabaa73f59e7"}
{"level":"info","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e35dd82c5f507a8ec7a0c3addde269457b4ed249572e80e8920fa3b1ecacdcda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:47:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:47:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/597c93ad52d13f8f9546c1f288952a470b1cbaa119def99c8ff4f25164de8787"}
{"level":"info","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1"}
{"level":"info","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:47:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:47:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a33e88fb8a6bad06d34e77f290e999d360e20ee1485ebfa18dbce2ee297666f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e35dd82c5f507a8ec7a0c3addde269457b4ed249572e80e8920fa3b1ecacdcda"}
{"level":"debug","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:47:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:47:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1"}
{"level":"info","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a33e88fb8a6bad06d34e77f290e999d360e20ee1485ebfa18dbce2ee297666f"}
{"level":"info","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73b5c4a83f30d3e11ab6ee2d6681e8ac53330e37c3bc51d5d25c29d25aa064c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:47:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:47:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73b5c4a83f30d3e11ab6ee2d6681e8ac53330e37c3bc51d5d25c29d25aa064c6"}
{"level":"info","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2075297ed7421c5919479862eaa011c0cb7cd93e5f7a6db054e83dd768a2ad0"}
{"level":"info","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73b5c4a83f30d3e11ab6ee2d6681e8ac53330e37c3bc51d5d25c29d25aa064c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2075297ed7421c5919479862eaa011c0cb7cd93e5f7a6db054e83dd768a2ad0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"221a9bd70341311fc5cc0dc86ae2f43461a4902d7bbbb6e9537fca0495b1bfc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73b5c4a83f30d3e11ab6ee2d6681e8ac53330e37c3bc51d5d25c29d25aa064c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:47:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:47:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73b5c4a83f30d3e11ab6ee2d6681e8ac53330e37c3bc51d5d25c29d25aa064c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1"}
{"level":"info","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73b5c4a83f30d3e11ab6ee2d6681e8ac53330e37c3bc51d5d25c29d25aa064c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:47:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:47:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/221a9bd70341311fc5cc0dc86ae2f43461a4902d7bbbb6e9537fca0495b1bfc9"}
{"level":"info","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73b5c4a83f30d3e11ab6ee2d6681e8ac53330e37c3bc51d5d25c29d25aa064c6"}
{"level":"info","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73b5c4a83f30d3e11ab6ee2d6681e8ac53330e37c3bc51d5d25c29d25aa064c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00760d4002d15857a8c7f9f5289c07006c221ca2d0077384071333e4894d149c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:47:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:47:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00760d4002d15857a8c7f9f5289c07006c221ca2d0077384071333e4894d149c"}
{"level":"info","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00760d4002d15857a8c7f9f5289c07006c221ca2d0077384071333e4894d149c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:47:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:47:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1de2c521ad4d2f13175c4a163f70eaf72310b2388c3672e7c42a9b7df959a3de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00760d4002d15857a8c7f9f5289c07006c221ca2d0077384071333e4894d149c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:47:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:47:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00760d4002d15857a8c7f9f5289c07006c221ca2d0077384071333e4894d149c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1"}
{"level":"info","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00760d4002d15857a8c7f9f5289c07006c221ca2d0077384071333e4894d149c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce6a24861f2e3d59dfe44943df9ca381d708e599247246eba240175ee5c6ffb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:47:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:47:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86d92ea941495ba23e0743303ffd07e32188c7eec7ce21d8939a5447d2deed4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00760d4002d15857a8c7f9f5289c07006c221ca2d0077384071333e4894d149c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2616a94aed0781c95a8b1dadc81e4317fa9558b2ccf4637f4b7332de68035f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1de2c521ad4d2f13175c4a163f70eaf72310b2388c3672e7c42a9b7df959a3de"}
{"level":"info","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00760d4002d15857a8c7f9f5289c07006c221ca2d0077384071333e4894d149c"}
{"level":"debug","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9ebfcb56afbb067c20781282a3a25e427d64ac1f133062212f269f94775542e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce6a24861f2e3d59dfe44943df9ca381d708e599247246eba240175ee5c6ffb0"}
{"level":"debug","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebe092ef797333c678bf90cc592fa1b8100c05b1a652e3720595563b89dcc442","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1"}
{"level":"info","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86d92ea941495ba23e0743303ffd07e32188c7eec7ce21d8939a5447d2deed4a"}
{"level":"info","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2616a94aed0781c95a8b1dadc81e4317fa9558b2ccf4637f4b7332de68035f14"}
{"level":"info","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9ebfcb56afbb067c20781282a3a25e427d64ac1f133062212f269f94775542e"}
{"level":"info","ts":"2026-07-07T17:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebe092ef797333c678bf90cc592fa1b8100c05b1a652e3720595563b89dcc442"}
{"level":"info","ts":"2026-07-07T17:47:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dae32786-bd54-4703-b3f2-fa6b0c984ea0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:32840","PortSpecifier":{"PortValue":32840}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dae32786-bd54-4703-b3f2-fa6b0c984ea0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T17:47:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dae32786-bd54-4703-b3f2-fa6b0c984ea0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:32840","PortSpecifier":{"PortValue":32840}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783446442,"nanos":645739636},"http":{"id":"dae32786-bd54-4703-b3f2-fa6b0c984ea0","method":"POST","headers":{":authority":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:47:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dae32786-bd54-4703-b3f2-fa6b0c984ea0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T17:47:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dae32786-bd54-4703-b3f2-fa6b0c984ea0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fe2d1374-3506-4595-ba2a-c54968aa7ca0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=837fe462-1f38-4836-a7b2-ac69beffdf31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c26313fcaa60"]}}
{"level":"debug","ts":"2026-07-07T17:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dae32786-bd54-4703-b3f2-fa6b0c984ea0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c26313fcaa60"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=837fe462-1f38-4836-a7b2-ac69beffdf31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fe2d1374-3506-4595-ba2a-c54968aa7ca0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ce6a24861f2e3d59dfe44943df9ca381d708e599247246eba240175ee5c6ffb0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dae32786-bd54-4703-b3f2-fa6b0c984ea0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dae32786-bd54-4703-b3f2-fa6b0c984ea0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dae32786-bd54-4703-b3f2-fa6b0c984ea0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dae32786-bd54-4703-b3f2-fa6b0c984ea0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T17:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dae32786-bd54-4703-b3f2-fa6b0c984ea0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T17:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dae32786-bd54-4703-b3f2-fa6b0c984ea0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T17:47:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dae32786-bd54-4703-b3f2-fa6b0c984ea0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T17:47:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dae32786-bd54-4703-b3f2-fa6b0c984ea0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T17:47:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0bf41b0c-0f97-48e9-a45f-644f499c8077","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:40804","PortSpecifier":{"PortValue":40804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0bf41b0c-0f97-48e9-a45f-644f499c8077","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ce87c9.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T17:47:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0bf41b0c-0f97-48e9-a45f-644f499c8077","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:40804","PortSpecifier":{"PortValue":40804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783446442,"nanos":689006506},"http":{"id":"0bf41b0c-0f97-48e9-a45f-644f499c8077","method":"POST","headers":{":authority":"e2e-shared-b-ce87c9.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:47:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0bf41b0c-0f97-48e9-a45f-644f499c8077","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T17:47:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0bf41b0c-0f97-48e9-a45f-644f499c8077","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fe2d1374-3506-4595-ba2a-c54968aa7ca0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=837fe462-1f38-4836-a7b2-ac69beffdf31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c26313fcaa60"]}}
{"level":"debug","ts":"2026-07-07T17:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0bf41b0c-0f97-48e9-a45f-644f499c8077","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c26313fcaa60"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=837fe462-1f38-4836-a7b2-ac69beffdf31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fe2d1374-3506-4595-ba2a-c54968aa7ca0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e0f8e20e049197b76ebeac4abe24f913efd1e862a1a1ff6ba439b4ecc04dfe06"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ce87c9.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bf41b0c-0f97-48e9-a45f-644f499c8077","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bf41b0c-0f97-48e9-a45f-644f499c8077","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bf41b0c-0f97-48e9-a45f-644f499c8077","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ce87c9/rate-test-model-ce87c9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0bf41b0c-0f97-48e9-a45f-644f499c8077","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T17:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bf41b0c-0f97-48e9-a45f-644f499c8077","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T17:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bf41b0c-0f97-48e9-a45f-644f499c8077","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T17:47:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0bf41b0c-0f97-48e9-a45f-644f499c8077","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T17:47:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0bf41b0c-0f97-48e9-a45f-644f499c8077","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T17:47:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb24daa8-037c-4889-99a8-da689cd2b752","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:32844","PortSpecifier":{"PortValue":32844}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cb24daa8-037c-4889-99a8-da689cd2b752","method":"POST","path":"/ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1/v1/completions","host":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T17:47:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb24daa8-037c-4889-99a8-da689cd2b752","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:32844","PortSpecifier":{"PortValue":32844}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783446442,"nanos":727594268},"http":{"id":"cb24daa8-037c-4889-99a8-da689cd2b752","method":"POST","headers":{":authority":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:47:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cb24daa8-037c-4889-99a8-da689cd2b752","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-kRBM3iiqvRJoDf0x_d4QvTh4fs7wGi0Y5MNkAs49LxWNIM1quRtXwCvmuI2d"}
{"level":"debug","ts":"2026-07-07T17:47:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cb24daa8-037c-4889-99a8-da689cd2b752","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-kRBM3iiqvRJoDf0x_d4QvTh4fs7wGi0Y5MNkAs49LxWNIM1quRtXwCvmuI2d\"}"}
{"level":"debug","ts":"2026-07-07T17:47:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cb24daa8-037c-4889-99a8-da689cd2b752","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7d9433bf-c423-440f-a08a-e703a6d0f054","keyName":"e2e-rate-a-b1fde2","subscription":"e2e-rate-iso-a-b1fde2","tenant":"e2e-shared-a-19c9b1","userId":"7d9433bf-c423-440f-a08a-e703a6d0f054","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T17:47:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cb24daa8-037c-4889-99a8-da689cd2b752","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1\",\"requestedSubscription\":\"e2e-rate-iso-a-b1fde2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T17:47:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cb24daa8-037c-4889-99a8-da689cd2b752","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-19c9b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b1fde2","namespace":"ai-tenant-e2e-shared-a-19c9b1","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T17:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cb24daa8-037c-4889-99a8-da689cd2b752","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb24daa8-037c-4889-99a8-da689cd2b752","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb24daa8-037c-4889-99a8-da689cd2b752","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb24daa8-037c-4889-99a8-da689cd2b752","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb24daa8-037c-4889-99a8-da689cd2b752","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb24daa8-037c-4889-99a8-da689cd2b752","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T17:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb24daa8-037c-4889-99a8-da689cd2b752","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b1fde2"}
{"level":"debug","ts":"2026-07-07T17:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb24daa8-037c-4889-99a8-da689cd2b752","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T17:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb24daa8-037c-4889-99a8-da689cd2b752","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7d9433bf-c423-440f-a08a-e703a6d0f054","keyName":"e2e-rate-a-b1fde2","selected_subscription":"e2e-rate-iso-a-b1fde2","selected_subscription_key":"ai-tenant-e2e-shared-a-19c9b1/e2e-rate-iso-a-b1fde2@ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-19c9b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b1fde2","namespace":"ai-tenant-e2e-shared-a-19c9b1","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T17:47:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb24daa8-037c-4889-99a8-da689cd2b752","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T17:47:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb24daa8-037c-4889-99a8-da689cd2b752","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T17:47:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3cc32728-2397-433e-98b4-a0addd879e5e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39782","PortSpecifier":{"PortValue":39782}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3cc32728-2397-433e-98b4-a0addd879e5e","method":"POST","path":"/ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1/v1/completions","host":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T17:47:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3cc32728-2397-433e-98b4-a0addd879e5e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39782","PortSpecifier":{"PortValue":39782}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783446443,"nanos":788657317},"http":{"id":"3cc32728-2397-433e-98b4-a0addd879e5e","method":"POST","headers":{":authority":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:47:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3cc32728-2397-433e-98b4-a0addd879e5e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-kRBM3iiqvRJoDf0x_d4QvTh4fs7wGi0Y5MNkAs49LxWNIM1quRtXwCvmuI2d"}
{"level":"debug","ts":"2026-07-07T17:47:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3cc32728-2397-433e-98b4-a0addd879e5e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-kRBM3iiqvRJoDf0x_d4QvTh4fs7wGi0Y5MNkAs49LxWNIM1quRtXwCvmuI2d\"}"}
{"level":"debug","ts":"2026-07-07T17:47:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3cc32728-2397-433e-98b4-a0addd879e5e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7d9433bf-c423-440f-a08a-e703a6d0f054","keyName":"e2e-rate-a-b1fde2","subscription":"e2e-rate-iso-a-b1fde2","tenant":"e2e-shared-a-19c9b1","userId":"7d9433bf-c423-440f-a08a-e703a6d0f054","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T17:47:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3cc32728-2397-433e-98b4-a0addd879e5e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1\",\"requestedSubscription\":\"e2e-rate-iso-a-b1fde2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T17:47:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3cc32728-2397-433e-98b4-a0addd879e5e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-19c9b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b1fde2","namespace":"ai-tenant-e2e-shared-a-19c9b1","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T17:47:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3cc32728-2397-433e-98b4-a0addd879e5e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:47:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3cc32728-2397-433e-98b4-a0addd879e5e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3cc32728-2397-433e-98b4-a0addd879e5e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3cc32728-2397-433e-98b4-a0addd879e5e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3cc32728-2397-433e-98b4-a0addd879e5e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3cc32728-2397-433e-98b4-a0addd879e5e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T17:47:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3cc32728-2397-433e-98b4-a0addd879e5e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T17:47:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3cc32728-2397-433e-98b4-a0addd879e5e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b1fde2"}
{"level":"debug","ts":"2026-07-07T17:47:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3cc32728-2397-433e-98b4-a0addd879e5e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7d9433bf-c423-440f-a08a-e703a6d0f054","keyName":"e2e-rate-a-b1fde2","selected_subscription":"e2e-rate-iso-a-b1fde2","selected_subscription_key":"ai-tenant-e2e-shared-a-19c9b1/e2e-rate-iso-a-b1fde2@ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-19c9b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b1fde2","namespace":"ai-tenant-e2e-shared-a-19c9b1","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T17:47:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3cc32728-2397-433e-98b4-a0addd879e5e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T17:47:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3cc32728-2397-433e-98b4-a0addd879e5e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T17:47:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"61c7ef84-7066-40fb-a43a-36ef9fe49ddf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39796","PortSpecifier":{"PortValue":39796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"61c7ef84-7066-40fb-a43a-36ef9fe49ddf","method":"POST","path":"/ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1/v1/completions","host":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T17:47:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"61c7ef84-7066-40fb-a43a-36ef9fe49ddf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39796","PortSpecifier":{"PortValue":39796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783446444,"nanos":832483802},"http":{"id":"61c7ef84-7066-40fb-a43a-36ef9fe49ddf","method":"POST","headers":{":authority":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:47:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"61c7ef84-7066-40fb-a43a-36ef9fe49ddf","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-kRBM3iiqvRJoDf0x_d4QvTh4fs7wGi0Y5MNkAs49LxWNIM1quRtXwCvmuI2d"}
{"level":"debug","ts":"2026-07-07T17:47:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"61c7ef84-7066-40fb-a43a-36ef9fe49ddf","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-kRBM3iiqvRJoDf0x_d4QvTh4fs7wGi0Y5MNkAs49LxWNIM1quRtXwCvmuI2d\"}"}
{"level":"debug","ts":"2026-07-07T17:47:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"61c7ef84-7066-40fb-a43a-36ef9fe49ddf","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7d9433bf-c423-440f-a08a-e703a6d0f054","keyName":"e2e-rate-a-b1fde2","subscription":"e2e-rate-iso-a-b1fde2","tenant":"e2e-shared-a-19c9b1","userId":"7d9433bf-c423-440f-a08a-e703a6d0f054","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T17:47:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"61c7ef84-7066-40fb-a43a-36ef9fe49ddf","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1\",\"requestedSubscription\":\"e2e-rate-iso-a-b1fde2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T17:47:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"61c7ef84-7066-40fb-a43a-36ef9fe49ddf","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-19c9b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b1fde2","namespace":"ai-tenant-e2e-shared-a-19c9b1","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T17:47:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"61c7ef84-7066-40fb-a43a-36ef9fe49ddf","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:47:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61c7ef84-7066-40fb-a43a-36ef9fe49ddf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61c7ef84-7066-40fb-a43a-36ef9fe49ddf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61c7ef84-7066-40fb-a43a-36ef9fe49ddf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61c7ef84-7066-40fb-a43a-36ef9fe49ddf","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61c7ef84-7066-40fb-a43a-36ef9fe49ddf","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T17:47:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61c7ef84-7066-40fb-a43a-36ef9fe49ddf","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b1fde2"}
{"level":"debug","ts":"2026-07-07T17:47:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61c7ef84-7066-40fb-a43a-36ef9fe49ddf","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T17:47:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61c7ef84-7066-40fb-a43a-36ef9fe49ddf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7d9433bf-c423-440f-a08a-e703a6d0f054","keyName":"e2e-rate-a-b1fde2","selected_subscription":"e2e-rate-iso-a-b1fde2","selected_subscription_key":"ai-tenant-e2e-shared-a-19c9b1/e2e-rate-iso-a-b1fde2@ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-19c9b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b1fde2","namespace":"ai-tenant-e2e-shared-a-19c9b1","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T17:47:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"61c7ef84-7066-40fb-a43a-36ef9fe49ddf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T17:47:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"61c7ef84-7066-40fb-a43a-36ef9fe49ddf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T17:47:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f9ec7561-7812-424a-89e4-cff41de741fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:45984","PortSpecifier":{"PortValue":45984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f9ec7561-7812-424a-89e4-cff41de741fe","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T17:47:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f9ec7561-7812-424a-89e4-cff41de741fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:45984","PortSpecifier":{"PortValue":45984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783446453,"nanos":923831045},"http":{"id":"f9ec7561-7812-424a-89e4-cff41de741fe","method":"POST","headers":{":authority":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:47:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f9ec7561-7812-424a-89e4-cff41de741fe","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T17:47:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f9ec7561-7812-424a-89e4-cff41de741fe","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fe2d1374-3506-4595-ba2a-c54968aa7ca0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=837fe462-1f38-4836-a7b2-ac69beffdf31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c26313fcaa60"]}}
{"level":"debug","ts":"2026-07-07T17:47:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f9ec7561-7812-424a-89e4-cff41de741fe","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c26313fcaa60"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=837fe462-1f38-4836-a7b2-ac69beffdf31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fe2d1374-3506-4595-ba2a-c54968aa7ca0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ce6a24861f2e3d59dfe44943df9ca381d708e599247246eba240175ee5c6ffb0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:47:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9ec7561-7812-424a-89e4-cff41de741fe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9ec7561-7812-424a-89e4-cff41de741fe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9ec7561-7812-424a-89e4-cff41de741fe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f9ec7561-7812-424a-89e4-cff41de741fe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T17:47:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9ec7561-7812-424a-89e4-cff41de741fe","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T17:47:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9ec7561-7812-424a-89e4-cff41de741fe","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T17:47:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f9ec7561-7812-424a-89e4-cff41de741fe","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T17:47:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f9ec7561-7812-424a-89e4-cff41de741fe","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T17:47:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2027e0ee-8f2a-4570-9ed5-362aa5d1c8fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:48146","PortSpecifier":{"PortValue":48146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2027e0ee-8f2a-4570-9ed5-362aa5d1c8fd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ce87c9.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T17:47:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2027e0ee-8f2a-4570-9ed5-362aa5d1c8fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:48146","PortSpecifier":{"PortValue":48146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783446453,"nanos":991860784},"http":{"id":"2027e0ee-8f2a-4570-9ed5-362aa5d1c8fd","method":"POST","headers":{":authority":"e2e-shared-b-ce87c9.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:47:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2027e0ee-8f2a-4570-9ed5-362aa5d1c8fd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T17:47:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2027e0ee-8f2a-4570-9ed5-362aa5d1c8fd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fe2d1374-3506-4595-ba2a-c54968aa7ca0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=837fe462-1f38-4836-a7b2-ac69beffdf31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c26313fcaa60"]}}
{"level":"debug","ts":"2026-07-07T17:47:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2027e0ee-8f2a-4570-9ed5-362aa5d1c8fd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c26313fcaa60"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=837fe462-1f38-4836-a7b2-ac69beffdf31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fe2d1374-3506-4595-ba2a-c54968aa7ca0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e0f8e20e049197b76ebeac4abe24f913efd1e862a1a1ff6ba439b4ecc04dfe06"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ce87c9.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:47:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2027e0ee-8f2a-4570-9ed5-362aa5d1c8fd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2027e0ee-8f2a-4570-9ed5-362aa5d1c8fd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2027e0ee-8f2a-4570-9ed5-362aa5d1c8fd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ce87c9/rate-test-model-ce87c9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2027e0ee-8f2a-4570-9ed5-362aa5d1c8fd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T17:47:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2027e0ee-8f2a-4570-9ed5-362aa5d1c8fd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T17:47:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2027e0ee-8f2a-4570-9ed5-362aa5d1c8fd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T17:47:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2027e0ee-8f2a-4570-9ed5-362aa5d1c8fd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T17:47:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2027e0ee-8f2a-4570-9ed5-362aa5d1c8fd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T17:47:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"99b90427-f198-48a9-87af-dc7b62eff981","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:45988","PortSpecifier":{"PortValue":45988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"99b90427-f198-48a9-87af-dc7b62eff981","method":"POST","path":"/ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1/v1/completions","host":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T17:47:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"99b90427-f198-48a9-87af-dc7b62eff981","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:45988","PortSpecifier":{"PortValue":45988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783446454,"nanos":33061671},"http":{"id":"99b90427-f198-48a9-87af-dc7b62eff981","method":"POST","headers":{":authority":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:47:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"99b90427-f198-48a9-87af-dc7b62eff981","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3UF9Ufkdr0pyv1KI_qxCIChFIde5yNvkkrUZcP4ux9IV52r6hEyIEZ14PCCP"}
{"level":"debug","ts":"2026-07-07T17:47:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"99b90427-f198-48a9-87af-dc7b62eff981","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3UF9Ufkdr0pyv1KI_qxCIChFIde5yNvkkrUZcP4ux9IV52r6hEyIEZ14PCCP\"}"}
{"level":"debug","ts":"2026-07-07T17:47:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"99b90427-f198-48a9-87af-dc7b62eff981","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b11d09b7-0e00-4b1b-af03-4603a413c962","keyName":"e2e-rate-a-0eb5de","subscription":"e2e-rate-iso-a-0eb5de","tenant":"e2e-shared-a-19c9b1","userId":"b11d09b7-0e00-4b1b-af03-4603a413c962","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T17:47:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"99b90427-f198-48a9-87af-dc7b62eff981","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1\",\"requestedSubscription\":\"e2e-rate-iso-a-0eb5de\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T17:47:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"99b90427-f198-48a9-87af-dc7b62eff981","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-19c9b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0eb5de","namespace":"ai-tenant-e2e-shared-a-19c9b1","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T17:47:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"99b90427-f198-48a9-87af-dc7b62eff981","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:47:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99b90427-f198-48a9-87af-dc7b62eff981","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99b90427-f198-48a9-87af-dc7b62eff981","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99b90427-f198-48a9-87af-dc7b62eff981","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99b90427-f198-48a9-87af-dc7b62eff981","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99b90427-f198-48a9-87af-dc7b62eff981","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T17:47:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99b90427-f198-48a9-87af-dc7b62eff981","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T17:47:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99b90427-f198-48a9-87af-dc7b62eff981","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0eb5de"}
{"level":"debug","ts":"2026-07-07T17:47:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99b90427-f198-48a9-87af-dc7b62eff981","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b11d09b7-0e00-4b1b-af03-4603a413c962","keyName":"e2e-rate-a-0eb5de","selected_subscription":"e2e-rate-iso-a-0eb5de","selected_subscription_key":"ai-tenant-e2e-shared-a-19c9b1/e2e-rate-iso-a-0eb5de@ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-19c9b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0eb5de","namespace":"ai-tenant-e2e-shared-a-19c9b1","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T17:47:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"99b90427-f198-48a9-87af-dc7b62eff981","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T17:47:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"99b90427-f198-48a9-87af-dc7b62eff981","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T17:47:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"433c97ed-4531-4e7f-947a-b5bbbd3bc7e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:46004","PortSpecifier":{"PortValue":46004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"433c97ed-4531-4e7f-947a-b5bbbd3bc7e7","method":"POST","path":"/ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1/v1/completions","host":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T17:47:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"433c97ed-4531-4e7f-947a-b5bbbd3bc7e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:46004","PortSpecifier":{"PortValue":46004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783446455,"nanos":80012533},"http":{"id":"433c97ed-4531-4e7f-947a-b5bbbd3bc7e7","method":"POST","headers":{":authority":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:47:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"433c97ed-4531-4e7f-947a-b5bbbd3bc7e7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3UF9Ufkdr0pyv1KI_qxCIChFIde5yNvkkrUZcP4ux9IV52r6hEyIEZ14PCCP"}
{"level":"debug","ts":"2026-07-07T17:47:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"433c97ed-4531-4e7f-947a-b5bbbd3bc7e7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3UF9Ufkdr0pyv1KI_qxCIChFIde5yNvkkrUZcP4ux9IV52r6hEyIEZ14PCCP\"}"}
{"level":"debug","ts":"2026-07-07T17:47:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"433c97ed-4531-4e7f-947a-b5bbbd3bc7e7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b11d09b7-0e00-4b1b-af03-4603a413c962","keyName":"e2e-rate-a-0eb5de","subscription":"e2e-rate-iso-a-0eb5de","tenant":"e2e-shared-a-19c9b1","userId":"b11d09b7-0e00-4b1b-af03-4603a413c962","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T17:47:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"433c97ed-4531-4e7f-947a-b5bbbd3bc7e7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1\",\"requestedSubscription\":\"e2e-rate-iso-a-0eb5de\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T17:47:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"433c97ed-4531-4e7f-947a-b5bbbd3bc7e7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-19c9b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0eb5de","namespace":"ai-tenant-e2e-shared-a-19c9b1","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T17:47:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"433c97ed-4531-4e7f-947a-b5bbbd3bc7e7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:47:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"433c97ed-4531-4e7f-947a-b5bbbd3bc7e7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"433c97ed-4531-4e7f-947a-b5bbbd3bc7e7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"433c97ed-4531-4e7f-947a-b5bbbd3bc7e7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"433c97ed-4531-4e7f-947a-b5bbbd3bc7e7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"433c97ed-4531-4e7f-947a-b5bbbd3bc7e7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T17:47:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"433c97ed-4531-4e7f-947a-b5bbbd3bc7e7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0eb5de"}
{"level":"debug","ts":"2026-07-07T17:47:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"433c97ed-4531-4e7f-947a-b5bbbd3bc7e7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T17:47:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"433c97ed-4531-4e7f-947a-b5bbbd3bc7e7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b11d09b7-0e00-4b1b-af03-4603a413c962","keyName":"e2e-rate-a-0eb5de","selected_subscription":"e2e-rate-iso-a-0eb5de","selected_subscription_key":"ai-tenant-e2e-shared-a-19c9b1/e2e-rate-iso-a-0eb5de@ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-19c9b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0eb5de","namespace":"ai-tenant-e2e-shared-a-19c9b1","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T17:47:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"433c97ed-4531-4e7f-947a-b5bbbd3bc7e7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T17:47:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"433c97ed-4531-4e7f-947a-b5bbbd3bc7e7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T17:47:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a05300b-a8a6-4956-8f1b-e0e7c1486248","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:46012","PortSpecifier":{"PortValue":46012}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2a05300b-a8a6-4956-8f1b-e0e7c1486248","method":"POST","path":"/ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1/v1/completions","host":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T17:47:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a05300b-a8a6-4956-8f1b-e0e7c1486248","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:46012","PortSpecifier":{"PortValue":46012}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783446456,"nanos":117801836},"http":{"id":"2a05300b-a8a6-4956-8f1b-e0e7c1486248","method":"POST","headers":{":authority":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:47:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2a05300b-a8a6-4956-8f1b-e0e7c1486248","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3UF9Ufkdr0pyv1KI_qxCIChFIde5yNvkkrUZcP4ux9IV52r6hEyIEZ14PCCP"}
{"level":"debug","ts":"2026-07-07T17:47:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2a05300b-a8a6-4956-8f1b-e0e7c1486248","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3UF9Ufkdr0pyv1KI_qxCIChFIde5yNvkkrUZcP4ux9IV52r6hEyIEZ14PCCP\"}"}
{"level":"debug","ts":"2026-07-07T17:47:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2a05300b-a8a6-4956-8f1b-e0e7c1486248","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b11d09b7-0e00-4b1b-af03-4603a413c962","keyName":"e2e-rate-a-0eb5de","subscription":"e2e-rate-iso-a-0eb5de","tenant":"e2e-shared-a-19c9b1","userId":"b11d09b7-0e00-4b1b-af03-4603a413c962","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T17:47:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2a05300b-a8a6-4956-8f1b-e0e7c1486248","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1\",\"requestedSubscription\":\"e2e-rate-iso-a-0eb5de\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T17:47:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2a05300b-a8a6-4956-8f1b-e0e7c1486248","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-19c9b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0eb5de","namespace":"ai-tenant-e2e-shared-a-19c9b1","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T17:47:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2a05300b-a8a6-4956-8f1b-e0e7c1486248","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:47:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a05300b-a8a6-4956-8f1b-e0e7c1486248","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a05300b-a8a6-4956-8f1b-e0e7c1486248","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a05300b-a8a6-4956-8f1b-e0e7c1486248","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a05300b-a8a6-4956-8f1b-e0e7c1486248","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a05300b-a8a6-4956-8f1b-e0e7c1486248","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T17:47:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a05300b-a8a6-4956-8f1b-e0e7c1486248","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T17:47:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a05300b-a8a6-4956-8f1b-e0e7c1486248","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0eb5de"}
{"level":"debug","ts":"2026-07-07T17:47:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a05300b-a8a6-4956-8f1b-e0e7c1486248","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b11d09b7-0e00-4b1b-af03-4603a413c962","keyName":"e2e-rate-a-0eb5de","selected_subscription":"e2e-rate-iso-a-0eb5de","selected_subscription_key":"ai-tenant-e2e-shared-a-19c9b1/e2e-rate-iso-a-0eb5de@ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-19c9b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0eb5de","namespace":"ai-tenant-e2e-shared-a-19c9b1","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T17:47:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a05300b-a8a6-4956-8f1b-e0e7c1486248","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T17:47:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a05300b-a8a6-4956-8f1b-e0e7c1486248","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T17:47:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d2d3c8f6-b8d7-4732-ad50-0ab55cc54723","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:46022","PortSpecifier":{"PortValue":46022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d2d3c8f6-b8d7-4732-ad50-0ab55cc54723","method":"POST","path":"/ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1/v1/completions","host":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T17:47:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d2d3c8f6-b8d7-4732-ad50-0ab55cc54723","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:46022","PortSpecifier":{"PortValue":46022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783446457,"nanos":158965182},"http":{"id":"d2d3c8f6-b8d7-4732-ad50-0ab55cc54723","method":"POST","headers":{":authority":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:47:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d2d3c8f6-b8d7-4732-ad50-0ab55cc54723","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3UF9Ufkdr0pyv1KI_qxCIChFIde5yNvkkrUZcP4ux9IV52r6hEyIEZ14PCCP"}
{"level":"debug","ts":"2026-07-07T17:47:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d2d3c8f6-b8d7-4732-ad50-0ab55cc54723","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3UF9Ufkdr0pyv1KI_qxCIChFIde5yNvkkrUZcP4ux9IV52r6hEyIEZ14PCCP\"}"}
{"level":"debug","ts":"2026-07-07T17:47:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d2d3c8f6-b8d7-4732-ad50-0ab55cc54723","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b11d09b7-0e00-4b1b-af03-4603a413c962","keyName":"e2e-rate-a-0eb5de","subscription":"e2e-rate-iso-a-0eb5de","tenant":"e2e-shared-a-19c9b1","userId":"b11d09b7-0e00-4b1b-af03-4603a413c962","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T17:47:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d2d3c8f6-b8d7-4732-ad50-0ab55cc54723","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1\",\"requestedSubscription\":\"e2e-rate-iso-a-0eb5de\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T17:47:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d2d3c8f6-b8d7-4732-ad50-0ab55cc54723","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-19c9b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0eb5de","namespace":"ai-tenant-e2e-shared-a-19c9b1","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T17:47:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d2d3c8f6-b8d7-4732-ad50-0ab55cc54723","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:47:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2d3c8f6-b8d7-4732-ad50-0ab55cc54723","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2d3c8f6-b8d7-4732-ad50-0ab55cc54723","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2d3c8f6-b8d7-4732-ad50-0ab55cc54723","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2d3c8f6-b8d7-4732-ad50-0ab55cc54723","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2d3c8f6-b8d7-4732-ad50-0ab55cc54723","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T17:47:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2d3c8f6-b8d7-4732-ad50-0ab55cc54723","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T17:47:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2d3c8f6-b8d7-4732-ad50-0ab55cc54723","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0eb5de"}
{"level":"debug","ts":"2026-07-07T17:47:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2d3c8f6-b8d7-4732-ad50-0ab55cc54723","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b11d09b7-0e00-4b1b-af03-4603a413c962","keyName":"e2e-rate-a-0eb5de","selected_subscription":"e2e-rate-iso-a-0eb5de","selected_subscription_key":"ai-tenant-e2e-shared-a-19c9b1/e2e-rate-iso-a-0eb5de@ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-19c9b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0eb5de","namespace":"ai-tenant-e2e-shared-a-19c9b1","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T17:47:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d2d3c8f6-b8d7-4732-ad50-0ab55cc54723","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T17:47:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d2d3c8f6-b8d7-4732-ad50-0ab55cc54723","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T17:47:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c547d719-f5f2-4680-8e88-fda7fdeda875","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:46036","PortSpecifier":{"PortValue":46036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c547d719-f5f2-4680-8e88-fda7fdeda875","method":"POST","path":"/ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1/v1/completions","host":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T17:47:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c547d719-f5f2-4680-8e88-fda7fdeda875","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:46036","PortSpecifier":{"PortValue":46036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783446458,"nanos":199429326},"http":{"id":"c547d719-f5f2-4680-8e88-fda7fdeda875","method":"POST","headers":{":authority":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:47:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c547d719-f5f2-4680-8e88-fda7fdeda875","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3UF9Ufkdr0pyv1KI_qxCIChFIde5yNvkkrUZcP4ux9IV52r6hEyIEZ14PCCP"}
{"level":"debug","ts":"2026-07-07T17:47:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c547d719-f5f2-4680-8e88-fda7fdeda875","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3UF9Ufkdr0pyv1KI_qxCIChFIde5yNvkkrUZcP4ux9IV52r6hEyIEZ14PCCP\"}"}
{"level":"debug","ts":"2026-07-07T17:47:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c547d719-f5f2-4680-8e88-fda7fdeda875","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b11d09b7-0e00-4b1b-af03-4603a413c962","keyName":"e2e-rate-a-0eb5de","subscription":"e2e-rate-iso-a-0eb5de","tenant":"e2e-shared-a-19c9b1","userId":"b11d09b7-0e00-4b1b-af03-4603a413c962","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T17:47:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c547d719-f5f2-4680-8e88-fda7fdeda875","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1\",\"requestedSubscription\":\"e2e-rate-iso-a-0eb5de\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T17:47:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c547d719-f5f2-4680-8e88-fda7fdeda875","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-19c9b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0eb5de","namespace":"ai-tenant-e2e-shared-a-19c9b1","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T17:47:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c547d719-f5f2-4680-8e88-fda7fdeda875","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:47:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c547d719-f5f2-4680-8e88-fda7fdeda875","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c547d719-f5f2-4680-8e88-fda7fdeda875","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c547d719-f5f2-4680-8e88-fda7fdeda875","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c547d719-f5f2-4680-8e88-fda7fdeda875","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c547d719-f5f2-4680-8e88-fda7fdeda875","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T17:47:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c547d719-f5f2-4680-8e88-fda7fdeda875","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T17:47:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c547d719-f5f2-4680-8e88-fda7fdeda875","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0eb5de"}
{"level":"debug","ts":"2026-07-07T17:47:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c547d719-f5f2-4680-8e88-fda7fdeda875","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b11d09b7-0e00-4b1b-af03-4603a413c962","keyName":"e2e-rate-a-0eb5de","selected_subscription":"e2e-rate-iso-a-0eb5de","selected_subscription_key":"ai-tenant-e2e-shared-a-19c9b1/e2e-rate-iso-a-0eb5de@ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-19c9b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0eb5de","namespace":"ai-tenant-e2e-shared-a-19c9b1","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T17:47:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c547d719-f5f2-4680-8e88-fda7fdeda875","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T17:47:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c547d719-f5f2-4680-8e88-fda7fdeda875","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T17:47:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7cb7115c-457e-46b9-84be-b7bf77742e2d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:46048","PortSpecifier":{"PortValue":46048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7cb7115c-457e-46b9-84be-b7bf77742e2d","method":"POST","path":"/ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1/v1/completions","host":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T17:47:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7cb7115c-457e-46b9-84be-b7bf77742e2d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:46048","PortSpecifier":{"PortValue":46048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783446459,"nanos":237426029},"http":{"id":"7cb7115c-457e-46b9-84be-b7bf77742e2d","method":"POST","headers":{":authority":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:47:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7cb7115c-457e-46b9-84be-b7bf77742e2d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3UF9Ufkdr0pyv1KI_qxCIChFIde5yNvkkrUZcP4ux9IV52r6hEyIEZ14PCCP"}
{"level":"debug","ts":"2026-07-07T17:47:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7cb7115c-457e-46b9-84be-b7bf77742e2d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3UF9Ufkdr0pyv1KI_qxCIChFIde5yNvkkrUZcP4ux9IV52r6hEyIEZ14PCCP\"}"}
{"level":"debug","ts":"2026-07-07T17:47:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7cb7115c-457e-46b9-84be-b7bf77742e2d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b11d09b7-0e00-4b1b-af03-4603a413c962","keyName":"e2e-rate-a-0eb5de","subscription":"e2e-rate-iso-a-0eb5de","tenant":"e2e-shared-a-19c9b1","userId":"b11d09b7-0e00-4b1b-af03-4603a413c962","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T17:47:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7cb7115c-457e-46b9-84be-b7bf77742e2d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1\",\"requestedSubscription\":\"e2e-rate-iso-a-0eb5de\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T17:47:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7cb7115c-457e-46b9-84be-b7bf77742e2d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-19c9b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0eb5de","namespace":"ai-tenant-e2e-shared-a-19c9b1","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T17:47:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7cb7115c-457e-46b9-84be-b7bf77742e2d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:47:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7cb7115c-457e-46b9-84be-b7bf77742e2d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7cb7115c-457e-46b9-84be-b7bf77742e2d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7cb7115c-457e-46b9-84be-b7bf77742e2d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7cb7115c-457e-46b9-84be-b7bf77742e2d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7cb7115c-457e-46b9-84be-b7bf77742e2d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T17:47:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7cb7115c-457e-46b9-84be-b7bf77742e2d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T17:47:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7cb7115c-457e-46b9-84be-b7bf77742e2d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0eb5de"}
{"level":"debug","ts":"2026-07-07T17:47:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7cb7115c-457e-46b9-84be-b7bf77742e2d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b11d09b7-0e00-4b1b-af03-4603a413c962","keyName":"e2e-rate-a-0eb5de","selected_subscription":"e2e-rate-iso-a-0eb5de","selected_subscription_key":"ai-tenant-e2e-shared-a-19c9b1/e2e-rate-iso-a-0eb5de@ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-19c9b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0eb5de","namespace":"ai-tenant-e2e-shared-a-19c9b1","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T17:47:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7cb7115c-457e-46b9-84be-b7bf77742e2d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T17:47:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7cb7115c-457e-46b9-84be-b7bf77742e2d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T17:47:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc220ea7-ea44-420a-a899-e1b7fd92c1a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:46058","PortSpecifier":{"PortValue":46058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dc220ea7-ea44-420a-a899-e1b7fd92c1a2","method":"POST","path":"/ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1/v1/completions","host":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T17:47:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc220ea7-ea44-420a-a899-e1b7fd92c1a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:46058","PortSpecifier":{"PortValue":46058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783446460,"nanos":276912441},"http":{"id":"dc220ea7-ea44-420a-a899-e1b7fd92c1a2","method":"POST","headers":{":authority":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:47:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dc220ea7-ea44-420a-a899-e1b7fd92c1a2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3UF9Ufkdr0pyv1KI_qxCIChFIde5yNvkkrUZcP4ux9IV52r6hEyIEZ14PCCP"}
{"level":"debug","ts":"2026-07-07T17:47:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dc220ea7-ea44-420a-a899-e1b7fd92c1a2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3UF9Ufkdr0pyv1KI_qxCIChFIde5yNvkkrUZcP4ux9IV52r6hEyIEZ14PCCP\"}"}
{"level":"debug","ts":"2026-07-07T17:47:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dc220ea7-ea44-420a-a899-e1b7fd92c1a2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b11d09b7-0e00-4b1b-af03-4603a413c962","keyName":"e2e-rate-a-0eb5de","subscription":"e2e-rate-iso-a-0eb5de","tenant":"e2e-shared-a-19c9b1","userId":"b11d09b7-0e00-4b1b-af03-4603a413c962","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T17:47:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dc220ea7-ea44-420a-a899-e1b7fd92c1a2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1\",\"requestedSubscription\":\"e2e-rate-iso-a-0eb5de\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T17:47:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dc220ea7-ea44-420a-a899-e1b7fd92c1a2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-19c9b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0eb5de","namespace":"ai-tenant-e2e-shared-a-19c9b1","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T17:47:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dc220ea7-ea44-420a-a899-e1b7fd92c1a2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:47:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc220ea7-ea44-420a-a899-e1b7fd92c1a2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc220ea7-ea44-420a-a899-e1b7fd92c1a2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc220ea7-ea44-420a-a899-e1b7fd92c1a2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc220ea7-ea44-420a-a899-e1b7fd92c1a2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc220ea7-ea44-420a-a899-e1b7fd92c1a2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T17:47:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc220ea7-ea44-420a-a899-e1b7fd92c1a2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0eb5de"}
{"level":"debug","ts":"2026-07-07T17:47:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc220ea7-ea44-420a-a899-e1b7fd92c1a2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T17:47:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc220ea7-ea44-420a-a899-e1b7fd92c1a2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b11d09b7-0e00-4b1b-af03-4603a413c962","keyName":"e2e-rate-a-0eb5de","selected_subscription":"e2e-rate-iso-a-0eb5de","selected_subscription_key":"ai-tenant-e2e-shared-a-19c9b1/e2e-rate-iso-a-0eb5de@ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-19c9b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0eb5de","namespace":"ai-tenant-e2e-shared-a-19c9b1","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T17:47:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc220ea7-ea44-420a-a899-e1b7fd92c1a2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T17:47:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc220ea7-ea44-420a-a899-e1b7fd92c1a2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T17:47:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a9c6106a-82b9-4145-ab6f-ed81abff796e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:46068","PortSpecifier":{"PortValue":46068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a9c6106a-82b9-4145-ab6f-ed81abff796e","method":"POST","path":"/ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1/v1/completions","host":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T17:47:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a9c6106a-82b9-4145-ab6f-ed81abff796e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:46068","PortSpecifier":{"PortValue":46068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783446461,"nanos":317539394},"http":{"id":"a9c6106a-82b9-4145-ab6f-ed81abff796e","method":"POST","headers":{":authority":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:47:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a9c6106a-82b9-4145-ab6f-ed81abff796e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3UF9Ufkdr0pyv1KI_qxCIChFIde5yNvkkrUZcP4ux9IV52r6hEyIEZ14PCCP"}
{"level":"debug","ts":"2026-07-07T17:47:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a9c6106a-82b9-4145-ab6f-ed81abff796e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3UF9Ufkdr0pyv1KI_qxCIChFIde5yNvkkrUZcP4ux9IV52r6hEyIEZ14PCCP\"}"}
{"level":"debug","ts":"2026-07-07T17:47:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a9c6106a-82b9-4145-ab6f-ed81abff796e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b11d09b7-0e00-4b1b-af03-4603a413c962","keyName":"e2e-rate-a-0eb5de","subscription":"e2e-rate-iso-a-0eb5de","tenant":"e2e-shared-a-19c9b1","userId":"b11d09b7-0e00-4b1b-af03-4603a413c962","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T17:47:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a9c6106a-82b9-4145-ab6f-ed81abff796e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1\",\"requestedSubscription\":\"e2e-rate-iso-a-0eb5de\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T17:47:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a9c6106a-82b9-4145-ab6f-ed81abff796e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-19c9b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0eb5de","namespace":"ai-tenant-e2e-shared-a-19c9b1","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T17:47:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a9c6106a-82b9-4145-ab6f-ed81abff796e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:47:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9c6106a-82b9-4145-ab6f-ed81abff796e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9c6106a-82b9-4145-ab6f-ed81abff796e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9c6106a-82b9-4145-ab6f-ed81abff796e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9c6106a-82b9-4145-ab6f-ed81abff796e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9c6106a-82b9-4145-ab6f-ed81abff796e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T17:47:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9c6106a-82b9-4145-ab6f-ed81abff796e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T17:47:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9c6106a-82b9-4145-ab6f-ed81abff796e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0eb5de"}
{"level":"debug","ts":"2026-07-07T17:47:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9c6106a-82b9-4145-ab6f-ed81abff796e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b11d09b7-0e00-4b1b-af03-4603a413c962","keyName":"e2e-rate-a-0eb5de","selected_subscription":"e2e-rate-iso-a-0eb5de","selected_subscription_key":"ai-tenant-e2e-shared-a-19c9b1/e2e-rate-iso-a-0eb5de@ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-19c9b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0eb5de","namespace":"ai-tenant-e2e-shared-a-19c9b1","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T17:47:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a9c6106a-82b9-4145-ab6f-ed81abff796e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T17:47:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a9c6106a-82b9-4145-ab6f-ed81abff796e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T17:47:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cfeef416-9687-452f-bbab-f74b69cf0255","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:46078","PortSpecifier":{"PortValue":46078}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cfeef416-9687-452f-bbab-f74b69cf0255","method":"POST","path":"/ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1/v1/completions","host":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T17:47:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cfeef416-9687-452f-bbab-f74b69cf0255","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:46078","PortSpecifier":{"PortValue":46078}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783446462,"nanos":357508832},"http":{"id":"cfeef416-9687-452f-bbab-f74b69cf0255","method":"POST","headers":{":authority":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:47:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cfeef416-9687-452f-bbab-f74b69cf0255","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3UF9Ufkdr0pyv1KI_qxCIChFIde5yNvkkrUZcP4ux9IV52r6hEyIEZ14PCCP"}
{"level":"debug","ts":"2026-07-07T17:47:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cfeef416-9687-452f-bbab-f74b69cf0255","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3UF9Ufkdr0pyv1KI_qxCIChFIde5yNvkkrUZcP4ux9IV52r6hEyIEZ14PCCP\"}"}
{"level":"debug","ts":"2026-07-07T17:47:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cfeef416-9687-452f-bbab-f74b69cf0255","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b11d09b7-0e00-4b1b-af03-4603a413c962","keyName":"e2e-rate-a-0eb5de","subscription":"e2e-rate-iso-a-0eb5de","tenant":"e2e-shared-a-19c9b1","userId":"b11d09b7-0e00-4b1b-af03-4603a413c962","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T17:47:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cfeef416-9687-452f-bbab-f74b69cf0255","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1\",\"requestedSubscription\":\"e2e-rate-iso-a-0eb5de\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T17:47:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cfeef416-9687-452f-bbab-f74b69cf0255","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-19c9b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0eb5de","namespace":"ai-tenant-e2e-shared-a-19c9b1","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T17:47:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cfeef416-9687-452f-bbab-f74b69cf0255","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:47:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cfeef416-9687-452f-bbab-f74b69cf0255","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cfeef416-9687-452f-bbab-f74b69cf0255","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cfeef416-9687-452f-bbab-f74b69cf0255","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cfeef416-9687-452f-bbab-f74b69cf0255","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cfeef416-9687-452f-bbab-f74b69cf0255","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0eb5de"}
{"level":"debug","ts":"2026-07-07T17:47:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cfeef416-9687-452f-bbab-f74b69cf0255","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T17:47:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cfeef416-9687-452f-bbab-f74b69cf0255","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T17:47:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cfeef416-9687-452f-bbab-f74b69cf0255","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b11d09b7-0e00-4b1b-af03-4603a413c962","keyName":"e2e-rate-a-0eb5de","selected_subscription":"e2e-rate-iso-a-0eb5de","selected_subscription_key":"ai-tenant-e2e-shared-a-19c9b1/e2e-rate-iso-a-0eb5de@ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-19c9b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0eb5de","namespace":"ai-tenant-e2e-shared-a-19c9b1","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T17:47:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cfeef416-9687-452f-bbab-f74b69cf0255","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T17:47:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cfeef416-9687-452f-bbab-f74b69cf0255","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T17:47:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a232977e-a8dc-4fca-ad66-146d7a804348","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:47958","PortSpecifier":{"PortValue":47958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a232977e-a8dc-4fca-ad66-146d7a804348","method":"POST","path":"/ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1/v1/completions","host":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T17:47:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a232977e-a8dc-4fca-ad66-146d7a804348","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:47958","PortSpecifier":{"PortValue":47958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783446463,"nanos":391645953},"http":{"id":"a232977e-a8dc-4fca-ad66-146d7a804348","method":"POST","headers":{":authority":"e2e-shared-a-19c9b1.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:47:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a232977e-a8dc-4fca-ad66-146d7a804348","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3UF9Ufkdr0pyv1KI_qxCIChFIde5yNvkkrUZcP4ux9IV52r6hEyIEZ14PCCP"}
{"level":"debug","ts":"2026-07-07T17:47:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a232977e-a8dc-4fca-ad66-146d7a804348","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3UF9Ufkdr0pyv1KI_qxCIChFIde5yNvkkrUZcP4ux9IV52r6hEyIEZ14PCCP\"}"}
{"level":"debug","ts":"2026-07-07T17:47:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a232977e-a8dc-4fca-ad66-146d7a804348","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b11d09b7-0e00-4b1b-af03-4603a413c962","keyName":"e2e-rate-a-0eb5de","subscription":"e2e-rate-iso-a-0eb5de","tenant":"e2e-shared-a-19c9b1","userId":"b11d09b7-0e00-4b1b-af03-4603a413c962","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T17:47:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a232977e-a8dc-4fca-ad66-146d7a804348","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1\",\"requestedSubscription\":\"e2e-rate-iso-a-0eb5de\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T17:47:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a232977e-a8dc-4fca-ad66-146d7a804348","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-19c9b1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-19c9b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0eb5de","namespace":"ai-tenant-e2e-shared-a-19c9b1","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T17:47:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a232977e-a8dc-4fca-ad66-146d7a804348","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:47:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a232977e-a8dc-4fca-ad66-146d7a804348","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a232977e-a8dc-4fca-ad66-146d7a804348","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a232977e-a8dc-4fca-ad66-146d7a804348","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a232977e-a8dc-4fca-ad66-146d7a804348","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a232977e-a8dc-4fca-ad66-146d7a804348","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T17:47:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a232977e-a8dc-4fca-ad66-146d7a804348","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0eb5de"}
{"level":"debug","ts":"2026-07-07T17:47:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a232977e-a8dc-4fca-ad66-146d7a804348","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T17:47:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a232977e-a8dc-4fca-ad66-146d7a804348","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b11d09b7-0e00-4b1b-af03-4603a413c962","keyName":"e2e-rate-a-0eb5de","selected_subscription":"e2e-rate-iso-a-0eb5de","selected_subscription_key":"ai-tenant-e2e-shared-a-19c9b1/e2e-rate-iso-a-0eb5de@ai-tenant-e2e-shared-a-19c9b1/rate-test-model-19c9b1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-19c9b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0eb5de","namespace":"ai-tenant-e2e-shared-a-19c9b1","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T17:47:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a232977e-a8dc-4fca-ad66-146d7a804348","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T17:47:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a232977e-a8dc-4fca-ad66-146d7a804348","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T17:47:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d97ef2e4-d2ce-4580-93b6-08d6620f39ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:59458","PortSpecifier":{"PortValue":59458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d97ef2e4-d2ce-4580-93b6-08d6620f39ff","method":"POST","path":"/ai-tenant-e2e-shared-b-ce87c9/rate-test-model-ce87c9/v1/completions","host":"e2e-shared-b-ce87c9.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T17:47:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d97ef2e4-d2ce-4580-93b6-08d6620f39ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:59458","PortSpecifier":{"PortValue":59458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783446463,"nanos":431046488},"http":{"id":"d97ef2e4-d2ce-4580-93b6-08d6620f39ff","method":"POST","headers":{":authority":"e2e-shared-b-ce87c9.apps.1d97bdc8-b55d-4428-9c0a-c26313fcaa60.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-ce87c9/rate-test-model-ce87c9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:47:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d97ef2e4-d2ce-4580-93b6-08d6620f39ff","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-zqr3ZoXVMcoEwmin_13uLE2t6jPBDrkJfwUgM4UWanCxiD3kTXfhu9y7cPu7"}
{"level":"debug","ts":"2026-07-07T17:47:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d97ef2e4-d2ce-4580-93b6-08d6620f39ff","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-ce87c9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-zqr3ZoXVMcoEwmin_13uLE2t6jPBDrkJfwUgM4UWanCxiD3kTXfhu9y7cPu7\"}"}
{"level":"debug","ts":"2026-07-07T17:47:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d97ef2e4-d2ce-4580-93b6-08d6620f39ff","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-ce87c9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"43ae24e0-6f15-4772-bd7a-50b32e6a4010","keyName":"e2e-rate-b-0eb5de","subscription":"e2e-rate-iso-b-0eb5de","tenant":"e2e-shared-b-ce87c9","userId":"43ae24e0-6f15-4772-bd7a-50b32e6a4010","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T17:47:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d97ef2e4-d2ce-4580-93b6-08d6620f39ff","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-ce87c9.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-ce87c9/rate-test-model-ce87c9\",\"requestedSubscription\":\"e2e-rate-iso-b-0eb5de\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T17:47:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d97ef2e4-d2ce-4580-93b6-08d6620f39ff","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-ce87c9.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ce87c9","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-0eb5de","namespace":"ai-tenant-e2e-shared-b-ce87c9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T17:47:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d97ef2e4-d2ce-4580-93b6-08d6620f39ff","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T17:47:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d97ef2e4-d2ce-4580-93b6-08d6620f39ff","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d97ef2e4-d2ce-4580-93b6-08d6620f39ff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d97ef2e4-d2ce-4580-93b6-08d6620f39ff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ce87c9/rate-test-model-ce87c9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d97ef2e4-d2ce-4580-93b6-08d6620f39ff","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T17:47:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d97ef2e4-d2ce-4580-93b6-08d6620f39ff","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T17:47:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d97ef2e4-d2ce-4580-93b6-08d6620f39ff","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-0eb5de"}
{"level":"debug","ts":"2026-07-07T17:47:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d97ef2e4-d2ce-4580-93b6-08d6620f39ff","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T17:47:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d97ef2e4-d2ce-4580-93b6-08d6620f39ff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"43ae24e0-6f15-4772-bd7a-50b32e6a4010","keyName":"e2e-rate-b-0eb5de","selected_subscription":"e2e-rate-iso-b-0eb5de","selected_subscription_key":"ai-tenant-e2e-shared-b-ce87c9/e2e-rate-iso-b-0eb5de@ai-tenant-e2e-shared-b-ce87c9/rate-test-model-ce87c9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ce87c9","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-0eb5de","namespace":"ai-tenant-e2e-shared-b-ce87c9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T17:47:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d97ef2e4-d2ce-4580-93b6-08d6620f39ff","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T17:47:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d97ef2e4-d2ce-4580-93b6-08d6620f39ff","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T17:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ebe092ef797333c678bf90cc592fa1b8100c05b1a652e3720595563b89dcc442"}
{"level":"info","ts":"2026-07-07T17:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a33e88fb8a6bad06d34e77f290e999d360e20ee1485ebfa18dbce2ee297666f"}
{"level":"info","ts":"2026-07-07T17:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1de2c521ad4d2f13175c4a163f70eaf72310b2388c3672e7c42a9b7df959a3de"}
{"level":"info","ts":"2026-07-07T17:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e35dd82c5f507a8ec7a0c3addde269457b4ed249572e80e8920fa3b1ecacdcda"}
{"level":"info","ts":"2026-07-07T17:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cde74f5de53e77d196a3aabf0abe3ce1507be42659b509a031e6951a70eae6ed"}
{"level":"info","ts":"2026-07-07T17:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/73b5c4a83f30d3e11ab6ee2d6681e8ac53330e37c3bc51d5d25c29d25aa064c6"}
{"level":"info","ts":"2026-07-07T17:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e2f8ee94fdcc577ae36273e7865ddc6628e7978cecea31e36afaabaa73f59e7"}
{"level":"info","ts":"2026-07-07T17:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1711770c354883dcc1cb93d0d03a753703b46da1c1ce46eeb1a2bda55e55b4dd"}
{"level":"info","ts":"2026-07-07T17:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/597c93ad52d13f8f9546c1f288952a470b1cbaa119def99c8ff4f25164de8787"}
{"level":"info","ts":"2026-07-07T17:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31d806710f35ce7ff75094aab8c317a486fcc45cef199a7196efeaddfad777ef"}
{"level":"info","ts":"2026-07-07T17:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/221a9bd70341311fc5cc0dc86ae2f43461a4902d7bbbb6e9537fca0495b1bfc9"}
{"level":"info","ts":"2026-07-07T17:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7fe0d80bd3060a4b116a3a1e875b9e1424fb9f3ad1889f2b6600d7b98ab0cfe1"}
{"level":"info","ts":"2026-07-07T17:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b9ebfcb56afbb067c20781282a3a25e427d64ac1f133062212f269f94775542e"}
{"level":"info","ts":"2026-07-07T17:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2616a94aed0781c95a8b1dadc81e4317fa9558b2ccf4637f4b7332de68035f14"}
{"level":"info","ts":"2026-07-07T17:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f2075297ed7421c5919479862eaa011c0cb7cd93e5f7a6db054e83dd768a2ad0"}
{"level":"info","ts":"2026-07-07T17:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/322586a5dae66b6b4722626aec3cbf7c7ce9b94039e8b76acef1b27f27b7b0f2"}
{"level":"info","ts":"2026-07-07T17:48:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c50221d222fb7b8ff4e11098df6b62d7b0c78ec2bc8847434de1ac76313f7c8"}
{"level":"info","ts":"2026-07-07T17:48:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce6a24861f2e3d59dfe44943df9ca381d708e599247246eba240175ee5c6ffb0"}
{"level":"info","ts":"2026-07-07T17:48:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/442d566dec4dad9158d3574e413880479effad04ebc5220720f2ee87a5f9fab6"}
{"level":"info","ts":"2026-07-07T17:48:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c1e7b3a36be8c501c2188990da07a0ec67d60ec50ce7566c918eb44876872137"}
{"level":"info","ts":"2026-07-07T17:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee5c8259cb0c30598dbdb5dc2df20f5a44ba138c5da30bfe6cabf955e681707d"}
{"level":"info","ts":"2026-07-07T17:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/86d92ea941495ba23e0743303ffd07e32188c7eec7ce21d8939a5447d2deed4a"}
{"level":"info","ts":"2026-07-07T17:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00760d4002d15857a8c7f9f5289c07006c221ca2d0077384071333e4894d149c"}
{"level":"info","ts":"2026-07-07T17:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e0f8e20e049197b76ebeac4abe24f913efd1e862a1a1ff6ba439b4ecc04dfe06"}