--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-29T03:20:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:20:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:20:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:20:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:20:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:20:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:20:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3"}
{"level":"debug","ts":"2026-07-29T03:20:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:20:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3"}
{"level":"debug","ts":"2026-07-29T03:20:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:20:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:20:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:20:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:20:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:20:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:20:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:20:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:20:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:20:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:20:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3"}
{"level":"debug","ts":"2026-07-29T03:20:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:20:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3"}
{"level":"debug","ts":"2026-07-29T03:20:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:20:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:20:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:20:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:20:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:20:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:20:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:20:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a"}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a"}
{"level":"debug","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3"}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a"}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65"}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3"}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a"}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65"}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3"}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59a3c24eb0a0e6105966b6cc96f2472f931bbeafc5b9c182e308bb7b9383e102","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20"}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59a3c24eb0a0e6105966b6cc96f2472f931bbeafc5b9c182e308bb7b9383e102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a"}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59a3c24eb0a0e6105966b6cc96f2472f931bbeafc5b9c182e308bb7b9383e102","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59a3c24eb0a0e6105966b6cc96f2472f931bbeafc5b9c182e308bb7b9383e102"}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59a3c24eb0a0e6105966b6cc96f2472f931bbeafc5b9c182e308bb7b9383e102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59a3c24eb0a0e6105966b6cc96f2472f931bbeafc5b9c182e308bb7b9383e102","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59a3c24eb0a0e6105966b6cc96f2472f931bbeafc5b9c182e308bb7b9383e102"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65"}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59a3c24eb0a0e6105966b6cc96f2472f931bbeafc5b9c182e308bb7b9383e102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59a3c24eb0a0e6105966b6cc96f2472f931bbeafc5b9c182e308bb7b9383e102","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3"}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20"}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a"}
{"level":"debug","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba25a9c20418a02c8a0734f083235919fabedfecc5d5ce02b179b8c7269f0ebd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba25a9c20418a02c8a0734f083235919fabedfecc5d5ce02b179b8c7269f0ebd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba25a9c20418a02c8a0734f083235919fabedfecc5d5ce02b179b8c7269f0ebd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba25a9c20418a02c8a0734f083235919fabedfecc5d5ce02b179b8c7269f0ebd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59a3c24eb0a0e6105966b6cc96f2472f931bbeafc5b9c182e308bb7b9383e102"}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba25a9c20418a02c8a0734f083235919fabedfecc5d5ce02b179b8c7269f0ebd"}
{"level":"debug","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba25a9c20418a02c8a0734f083235919fabedfecc5d5ce02b179b8c7269f0ebd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba25a9c20418a02c8a0734f083235919fabedfecc5d5ce02b179b8c7269f0ebd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba25a9c20418a02c8a0734f083235919fabedfecc5d5ce02b179b8c7269f0ebd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba25a9c20418a02c8a0734f083235919fabedfecc5d5ce02b179b8c7269f0ebd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba25a9c20418a02c8a0734f083235919fabedfecc5d5ce02b179b8c7269f0ebd"}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba25a9c20418a02c8a0734f083235919fabedfecc5d5ce02b179b8c7269f0ebd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07"}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba25a9c20418a02c8a0734f083235919fabedfecc5d5ce02b179b8c7269f0ebd"}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba25a9c20418a02c8a0734f083235919fabedfecc5d5ce02b179b8c7269f0ebd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba25a9c20418a02c8a0734f083235919fabedfecc5d5ce02b179b8c7269f0ebd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf"}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07"}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba25a9c20418a02c8a0734f083235919fabedfecc5d5ce02b179b8c7269f0ebd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba25a9c20418a02c8a0734f083235919fabedfecc5d5ce02b179b8c7269f0ebd"}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf"}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba25a9c20418a02c8a0734f083235919fabedfecc5d5ce02b179b8c7269f0ebd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07"}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07"}
{"level":"debug","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07"}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07"}
{"level":"debug","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:20:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:20:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07"}
{"level":"info","ts":"2026-07-29T03:20:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80982faa-c164-4c10-8c73-bb925a979100","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:53390","PortSpecifier":{"PortValue":53390}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"80982faa-c164-4c10-8c73-bb925a979100","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T03:20:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80982faa-c164-4c10-8c73-bb925a979100","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:53390","PortSpecifier":{"PortValue":53390}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785295244,"nanos":26383569},"http":{"id":"80982faa-c164-4c10-8c73-bb925a979100","method":"POST","headers":{":authority":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:20:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"80982faa-c164-4c10-8c73-bb925a979100","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T03:20:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"80982faa-c164-4c10-8c73-bb925a979100","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1618919a-3ba0-4198-a1c1-cb1ddccaf188","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f8a80838-796d-4745-8e65-dede54c057eb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e8a4b9e0ac87"]}}
{"level":"debug","ts":"2026-07-29T03:20:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"80982faa-c164-4c10-8c73-bb925a979100","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e8a4b9e0ac87"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f8a80838-796d-4745-8e65-dede54c057eb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1618919a-3ba0-4198-a1c1-cb1ddccaf188","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bc864e45ae1aa51dcc97ead2b76c25dc0bc413a02e0953ca40962805baabea0c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:20:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80982faa-c164-4c10-8c73-bb925a979100","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:20:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80982faa-c164-4c10-8c73-bb925a979100","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:20:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80982faa-c164-4c10-8c73-bb925a979100","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f4870d/auth-test-model-f4870d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f4870d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:20:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"80982faa-c164-4c10-8c73-bb925a979100","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T03:20:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80982faa-c164-4c10-8c73-bb925a979100","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T03:20:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80982faa-c164-4c10-8c73-bb925a979100","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-29T03:20:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80982faa-c164-4c10-8c73-bb925a979100","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T03:20:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80982faa-c164-4c10-8c73-bb925a979100","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T03:20:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c391b2f-3f23-401b-9cdf-70d45f74eeff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57838","PortSpecifier":{"PortValue":57838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7c391b2f-3f23-401b-9cdf-70d45f74eeff","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-19184d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T03:20:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c391b2f-3f23-401b-9cdf-70d45f74eeff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57838","PortSpecifier":{"PortValue":57838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785295244,"nanos":63488950},"http":{"id":"7c391b2f-3f23-401b-9cdf-70d45f74eeff","method":"POST","headers":{":authority":"e2e-shared-b-19184d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:20:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7c391b2f-3f23-401b-9cdf-70d45f74eeff","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T03:20:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7c391b2f-3f23-401b-9cdf-70d45f74eeff","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1618919a-3ba0-4198-a1c1-cb1ddccaf188","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f8a80838-796d-4745-8e65-dede54c057eb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e8a4b9e0ac87"]}}
{"level":"debug","ts":"2026-07-29T03:20:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7c391b2f-3f23-401b-9cdf-70d45f74eeff","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e8a4b9e0ac87"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f8a80838-796d-4745-8e65-dede54c057eb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1618919a-3ba0-4198-a1c1-cb1ddccaf188","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-19184d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:20:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c391b2f-3f23-401b-9cdf-70d45f74eeff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:20:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c391b2f-3f23-401b-9cdf-70d45f74eeff","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:20:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c391b2f-3f23-401b-9cdf-70d45f74eeff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-19184d/auth-test-model-19184d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-19184d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:20:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7c391b2f-3f23-401b-9cdf-70d45f74eeff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T03:20:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c391b2f-3f23-401b-9cdf-70d45f74eeff","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T03:20:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c391b2f-3f23-401b-9cdf-70d45f74eeff","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-29T03:20:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c391b2f-3f23-401b-9cdf-70d45f74eeff","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T03:20:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c391b2f-3f23-401b-9cdf-70d45f74eeff","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T03:20:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0f0d3c22-5149-429d-bf18-ee0471c84908","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:53392","PortSpecifier":{"PortValue":53392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0f0d3c22-5149-429d-bf18-ee0471c84908","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T03:20:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0f0d3c22-5149-429d-bf18-ee0471c84908","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:53392","PortSpecifier":{"PortValue":53392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785295244,"nanos":102960293},"http":{"id":"0f0d3c22-5149-429d-bf18-ee0471c84908","method":"POST","headers":{":authority":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:20:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0f0d3c22-5149-429d-bf18-ee0471c84908","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T03:20:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0f0d3c22-5149-429d-bf18-ee0471c84908","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1618919a-3ba0-4198-a1c1-cb1ddccaf188","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f8a80838-796d-4745-8e65-dede54c057eb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e8a4b9e0ac87"]}}
{"level":"debug","ts":"2026-07-29T03:20:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0f0d3c22-5149-429d-bf18-ee0471c84908","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e8a4b9e0ac87"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f8a80838-796d-4745-8e65-dede54c057eb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1618919a-3ba0-4198-a1c1-cb1ddccaf188","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bc864e45ae1aa51dcc97ead2b76c25dc0bc413a02e0953ca40962805baabea0c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:20:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f0d3c22-5149-429d-bf18-ee0471c84908","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:20:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f0d3c22-5149-429d-bf18-ee0471c84908","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:20:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f0d3c22-5149-429d-bf18-ee0471c84908","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f4870d/auth-test-model-f4870d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f4870d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:20:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0f0d3c22-5149-429d-bf18-ee0471c84908","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T03:20:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f0d3c22-5149-429d-bf18-ee0471c84908","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T03:20:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f0d3c22-5149-429d-bf18-ee0471c84908","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-29T03:20:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0f0d3c22-5149-429d-bf18-ee0471c84908","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T03:20:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0f0d3c22-5149-429d-bf18-ee0471c84908","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T03:20:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"73e91f69-843b-4f0e-a49e-5c95b0466a3c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57854","PortSpecifier":{"PortValue":57854}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"73e91f69-843b-4f0e-a49e-5c95b0466a3c","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-19184d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T03:20:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"73e91f69-843b-4f0e-a49e-5c95b0466a3c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57854","PortSpecifier":{"PortValue":57854}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785295244,"nanos":140568898},"http":{"id":"73e91f69-843b-4f0e-a49e-5c95b0466a3c","method":"POST","headers":{":authority":"e2e-shared-b-19184d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:20:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"73e91f69-843b-4f0e-a49e-5c95b0466a3c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T03:20:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"73e91f69-843b-4f0e-a49e-5c95b0466a3c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1618919a-3ba0-4198-a1c1-cb1ddccaf188","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f8a80838-796d-4745-8e65-dede54c057eb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e8a4b9e0ac87"]}}
{"level":"debug","ts":"2026-07-29T03:20:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"73e91f69-843b-4f0e-a49e-5c95b0466a3c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e8a4b9e0ac87"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f8a80838-796d-4745-8e65-dede54c057eb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1618919a-3ba0-4198-a1c1-cb1ddccaf188","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-19184d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:20:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73e91f69-843b-4f0e-a49e-5c95b0466a3c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:20:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73e91f69-843b-4f0e-a49e-5c95b0466a3c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:20:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73e91f69-843b-4f0e-a49e-5c95b0466a3c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-19184d/auth-test-model-19184d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-19184d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:20:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"73e91f69-843b-4f0e-a49e-5c95b0466a3c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T03:20:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73e91f69-843b-4f0e-a49e-5c95b0466a3c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T03:20:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73e91f69-843b-4f0e-a49e-5c95b0466a3c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-29T03:20:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"73e91f69-843b-4f0e-a49e-5c95b0466a3c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T03:20:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"73e91f69-843b-4f0e-a49e-5c95b0466a3c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T03:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3"}
{"level":"info","ts":"2026-07-29T03:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba25a9c20418a02c8a0734f083235919fabedfecc5d5ce02b179b8c7269f0ebd"}
{"level":"info","ts":"2026-07-29T03:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf"}
{"level":"info","ts":"2026-07-29T03:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/32400c98fee987dee50eaf949ea69596a70b97afabede31f66103650627abf2b"}
{"level":"info","ts":"2026-07-29T03:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3"}
{"level":"info","ts":"2026-07-29T03:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20"}
{"level":"info","ts":"2026-07-29T03:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07"}
{"level":"info","ts":"2026-07-29T03:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59a3c24eb0a0e6105966b6cc96f2472f931bbeafc5b9c182e308bb7b9383e102"}
{"level":"info","ts":"2026-07-29T03:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65"}
{"level":"info","ts":"2026-07-29T03:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b"}
{"level":"info","ts":"2026-07-29T03:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a"}
{"level":"info","ts":"2026-07-29T03:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb"}
{"level":"debug","ts":"2026-07-29T03:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3"}
{"level":"debug","ts":"2026-07-29T03:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3"}
{"level":"debug","ts":"2026-07-29T03:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3"}
{"level":"debug","ts":"2026-07-29T03:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3"}
{"level":"debug","ts":"2026-07-29T03:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3"}
{"level":"debug","ts":"2026-07-29T03:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3"}
{"level":"debug","ts":"2026-07-29T03:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3"}
{"level":"debug","ts":"2026-07-29T03:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3"}
{"level":"debug","ts":"2026-07-29T03:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3"}
{"level":"debug","ts":"2026-07-29T03:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3"}
{"level":"debug","ts":"2026-07-29T03:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a"}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a"}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a"}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf"}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a"}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf"}
{"level":"error","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a"}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59a3c24eb0a0e6105966b6cc96f2472f931bbeafc5b9c182e308bb7b9383e102","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf"}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59a3c24eb0a0e6105966b6cc96f2472f931bbeafc5b9c182e308bb7b9383e102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59a3c24eb0a0e6105966b6cc96f2472f931bbeafc5b9c182e308bb7b9383e102"}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59a3c24eb0a0e6105966b6cc96f2472f931bbeafc5b9c182e308bb7b9383e102","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59a3c24eb0a0e6105966b6cc96f2472f931bbeafc5b9c182e308bb7b9383e102"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a"}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59a3c24eb0a0e6105966b6cc96f2472f931bbeafc5b9c182e308bb7b9383e102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf"}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59a3c24eb0a0e6105966b6cc96f2472f931bbeafc5b9c182e308bb7b9383e102","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59a3c24eb0a0e6105966b6cc96f2472f931bbeafc5b9c182e308bb7b9383e102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59a3c24eb0a0e6105966b6cc96f2472f931bbeafc5b9c182e308bb7b9383e102"}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59a3c24eb0a0e6105966b6cc96f2472f931bbeafc5b9c182e308bb7b9383e102","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59a3c24eb0a0e6105966b6cc96f2472f931bbeafc5b9c182e308bb7b9383e102"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59a3c24eb0a0e6105966b6cc96f2472f931bbeafc5b9c182e308bb7b9383e102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba25a9c20418a02c8a0734f083235919fabedfecc5d5ce02b179b8c7269f0ebd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a"}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba25a9c20418a02c8a0734f083235919fabedfecc5d5ce02b179b8c7269f0ebd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf"}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59a3c24eb0a0e6105966b6cc96f2472f931bbeafc5b9c182e308bb7b9383e102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba25a9c20418a02c8a0734f083235919fabedfecc5d5ce02b179b8c7269f0ebd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba25a9c20418a02c8a0734f083235919fabedfecc5d5ce02b179b8c7269f0ebd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba25a9c20418a02c8a0734f083235919fabedfecc5d5ce02b179b8c7269f0ebd"}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba25a9c20418a02c8a0734f083235919fabedfecc5d5ce02b179b8c7269f0ebd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba25a9c20418a02c8a0734f083235919fabedfecc5d5ce02b179b8c7269f0ebd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59a3c24eb0a0e6105966b6cc96f2472f931bbeafc5b9c182e308bb7b9383e102"}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba25a9c20418a02c8a0734f083235919fabedfecc5d5ce02b179b8c7269f0ebd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba25a9c20418a02c8a0734f083235919fabedfecc5d5ce02b179b8c7269f0ebd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf"}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba25a9c20418a02c8a0734f083235919fabedfecc5d5ce02b179b8c7269f0ebd"}
{"level":"error","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf"}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf"}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07"}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf"}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07"}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32400c98fee987dee50eaf949ea69596a70b97afabede31f66103650627abf2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07"}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32400c98fee987dee50eaf949ea69596a70b97afabede31f66103650627abf2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32400c98fee987dee50eaf949ea69596a70b97afabede31f66103650627abf2b"}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32400c98fee987dee50eaf949ea69596a70b97afabede31f66103650627abf2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32400c98fee987dee50eaf949ea69596a70b97afabede31f66103650627abf2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32400c98fee987dee50eaf949ea69596a70b97afabede31f66103650627abf2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07"}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32400c98fee987dee50eaf949ea69596a70b97afabede31f66103650627abf2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32400c98fee987dee50eaf949ea69596a70b97afabede31f66103650627abf2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32400c98fee987dee50eaf949ea69596a70b97afabede31f66103650627abf2b"}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32400c98fee987dee50eaf949ea69596a70b97afabede31f66103650627abf2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32400c98fee987dee50eaf949ea69596a70b97afabede31f66103650627abf2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07"}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32400c98fee987dee50eaf949ea69596a70b97afabede31f66103650627abf2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32400c98fee987dee50eaf949ea69596a70b97afabede31f66103650627abf2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32400c98fee987dee50eaf949ea69596a70b97afabede31f66103650627abf2b"}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32400c98fee987dee50eaf949ea69596a70b97afabede31f66103650627abf2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32400c98fee987dee50eaf949ea69596a70b97afabede31f66103650627abf2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32400c98fee987dee50eaf949ea69596a70b97afabede31f66103650627abf2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65"}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32400c98fee987dee50eaf949ea69596a70b97afabede31f66103650627abf2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07"}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32400c98fee987dee50eaf949ea69596a70b97afabede31f66103650627abf2b"}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32400c98fee987dee50eaf949ea69596a70b97afabede31f66103650627abf2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65"}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65"}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65"}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65"}
{"level":"info","ts":"2026-07-29T03:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb"}
{"level":"info","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65"}
{"level":"info","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb"}
{"level":"info","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b"}
{"level":"info","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20"}
{"level":"info","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65"}
{"level":"info","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b"}
{"level":"info","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20"}
{"level":"info","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b"}
{"level":"debug","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b"}
{"level":"info","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b"}
{"level":"debug","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b"}
{"level":"info","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b"}
{"level":"debug","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b"}
{"level":"info","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b"}
{"level":"debug","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b"}
{"level":"info","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b"}
{"level":"debug","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b"}
{"level":"info","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b"}
{"level":"info","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b"}
{"level":"error","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:21:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e8f6a742-b406-470a-8791-d60f94d7ebf2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50930","PortSpecifier":{"PortValue":50930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e8f6a742-b406-470a-8791-d60f94d7ebf2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T03:21:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e8f6a742-b406-470a-8791-d60f94d7ebf2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50930","PortSpecifier":{"PortValue":50930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785295282,"nanos":977306355},"http":{"id":"e8f6a742-b406-470a-8791-d60f94d7ebf2","method":"POST","headers":{":authority":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:21:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e8f6a742-b406-470a-8791-d60f94d7ebf2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T03:21:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e8f6a742-b406-470a-8791-d60f94d7ebf2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1618919a-3ba0-4198-a1c1-cb1ddccaf188","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f8a80838-796d-4745-8e65-dede54c057eb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e8a4b9e0ac87"]}}
{"level":"debug","ts":"2026-07-29T03:21:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e8f6a742-b406-470a-8791-d60f94d7ebf2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e8a4b9e0ac87"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f8a80838-796d-4745-8e65-dede54c057eb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1618919a-3ba0-4198-a1c1-cb1ddccaf188","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bc864e45ae1aa51dcc97ead2b76c25dc0bc413a02e0953ca40962805baabea0c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:21:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8f6a742-b406-470a-8791-d60f94d7ebf2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:21:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8f6a742-b406-470a-8791-d60f94d7ebf2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:21:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8f6a742-b406-470a-8791-d60f94d7ebf2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f4870d/auth-test-model-f4870d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f4870d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:21:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e8f6a742-b406-470a-8791-d60f94d7ebf2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T03:21:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e8f6a742-b406-470a-8791-d60f94d7ebf2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T03:21:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e8f6a742-b406-470a-8791-d60f94d7ebf2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-29T03:21:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e8f6a742-b406-470a-8791-d60f94d7ebf2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T03:21:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e8f6a742-b406-470a-8791-d60f94d7ebf2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T03:21:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20552aad-a687-4441-9429-41f23248e4e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38418","PortSpecifier":{"PortValue":38418}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"20552aad-a687-4441-9429-41f23248e4e7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-19184d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T03:21:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20552aad-a687-4441-9429-41f23248e4e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38418","PortSpecifier":{"PortValue":38418}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785295283,"nanos":13228485},"http":{"id":"20552aad-a687-4441-9429-41f23248e4e7","method":"POST","headers":{":authority":"e2e-shared-b-19184d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:21:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"20552aad-a687-4441-9429-41f23248e4e7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T03:21:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"20552aad-a687-4441-9429-41f23248e4e7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1618919a-3ba0-4198-a1c1-cb1ddccaf188","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f8a80838-796d-4745-8e65-dede54c057eb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e8a4b9e0ac87"]}}
{"level":"debug","ts":"2026-07-29T03:21:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"20552aad-a687-4441-9429-41f23248e4e7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e8a4b9e0ac87"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f8a80838-796d-4745-8e65-dede54c057eb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1618919a-3ba0-4198-a1c1-cb1ddccaf188","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-19184d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:21:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20552aad-a687-4441-9429-41f23248e4e7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:21:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20552aad-a687-4441-9429-41f23248e4e7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:21:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20552aad-a687-4441-9429-41f23248e4e7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-19184d/auth-test-model-19184d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-19184d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:21:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"20552aad-a687-4441-9429-41f23248e4e7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T03:21:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20552aad-a687-4441-9429-41f23248e4e7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T03:21:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20552aad-a687-4441-9429-41f23248e4e7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-29T03:21:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20552aad-a687-4441-9429-41f23248e4e7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T03:21:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20552aad-a687-4441-9429-41f23248e4e7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T03:21:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1451ad5-48b3-4ce1-9eae-45bc05c91b0c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38434","PortSpecifier":{"PortValue":38434}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b1451ad5-48b3-4ce1-9eae-45bc05c91b0c","method":"GET","path":"/maas-api/v1/api-keys/31c9ed03-4b1a-4448-93f3-dc7d3e910092","host":"e2e-shared-b-19184d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T03:21:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1451ad5-48b3-4ce1-9eae-45bc05c91b0c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38434","PortSpecifier":{"PortValue":38434}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785295283,"nanos":56228298},"http":{"id":"b1451ad5-48b3-4ce1-9eae-45bc05c91b0c","method":"GET","headers":{":authority":"e2e-shared-b-19184d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/31c9ed03-4b1a-4448-93f3-dc7d3e910092",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:21:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b1451ad5-48b3-4ce1-9eae-45bc05c91b0c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T03:21:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b1451ad5-48b3-4ce1-9eae-45bc05c91b0c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1618919a-3ba0-4198-a1c1-cb1ddccaf188","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f8a80838-796d-4745-8e65-dede54c057eb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e8a4b9e0ac87"]}}
{"level":"debug","ts":"2026-07-29T03:21:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b1451ad5-48b3-4ce1-9eae-45bc05c91b0c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e8a4b9e0ac87"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f8a80838-796d-4745-8e65-dede54c057eb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1618919a-3ba0-4198-a1c1-cb1ddccaf188","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-19184d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/31c9ed03-4b1a-4448-93f3-dc7d3e910092",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:21:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1451ad5-48b3-4ce1-9eae-45bc05c91b0c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:21:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1451ad5-48b3-4ce1-9eae-45bc05c91b0c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:21:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1451ad5-48b3-4ce1-9eae-45bc05c91b0c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-19184d/auth-test-model-19184d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-19184d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:21:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b1451ad5-48b3-4ce1-9eae-45bc05c91b0c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T03:21:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1451ad5-48b3-4ce1-9eae-45bc05c91b0c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T03:21:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1451ad5-48b3-4ce1-9eae-45bc05c91b0c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-29T03:21:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1451ad5-48b3-4ce1-9eae-45bc05c91b0c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T03:21:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1451ad5-48b3-4ce1-9eae-45bc05c91b0c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T03:21:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd6a6b95-f703-49a2-8dcf-147d283f7bbd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50946","PortSpecifier":{"PortValue":50946}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cd6a6b95-f703-49a2-8dcf-147d283f7bbd","method":"GET","path":"/maas-api/v1/api-keys/31c9ed03-4b1a-4448-93f3-dc7d3e910092","host":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T03:21:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd6a6b95-f703-49a2-8dcf-147d283f7bbd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50946","PortSpecifier":{"PortValue":50946}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785295283,"nanos":94680663},"http":{"id":"cd6a6b95-f703-49a2-8dcf-147d283f7bbd","method":"GET","headers":{":authority":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/31c9ed03-4b1a-4448-93f3-dc7d3e910092",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:21:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cd6a6b95-f703-49a2-8dcf-147d283f7bbd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T03:21:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cd6a6b95-f703-49a2-8dcf-147d283f7bbd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1618919a-3ba0-4198-a1c1-cb1ddccaf188","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f8a80838-796d-4745-8e65-dede54c057eb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e8a4b9e0ac87"]}}
{"level":"debug","ts":"2026-07-29T03:21:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cd6a6b95-f703-49a2-8dcf-147d283f7bbd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e8a4b9e0ac87"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f8a80838-796d-4745-8e65-dede54c057eb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1618919a-3ba0-4198-a1c1-cb1ddccaf188","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bc864e45ae1aa51dcc97ead2b76c25dc0bc413a02e0953ca40962805baabea0c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/31c9ed03-4b1a-4448-93f3-dc7d3e910092",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:21:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd6a6b95-f703-49a2-8dcf-147d283f7bbd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:21:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd6a6b95-f703-49a2-8dcf-147d283f7bbd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:21:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd6a6b95-f703-49a2-8dcf-147d283f7bbd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f4870d/auth-test-model-f4870d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f4870d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:21:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cd6a6b95-f703-49a2-8dcf-147d283f7bbd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T03:21:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd6a6b95-f703-49a2-8dcf-147d283f7bbd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T03:21:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd6a6b95-f703-49a2-8dcf-147d283f7bbd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-29T03:21:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd6a6b95-f703-49a2-8dcf-147d283f7bbd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T03:21:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd6a6b95-f703-49a2-8dcf-147d283f7bbd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T03:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf"}
{"level":"info","ts":"2026-07-29T03:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba25a9c20418a02c8a0734f083235919fabedfecc5d5ce02b179b8c7269f0ebd"}
{"level":"info","ts":"2026-07-29T03:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b"}
{"level":"info","ts":"2026-07-29T03:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65"}
{"level":"info","ts":"2026-07-29T03:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3"}
{"level":"info","ts":"2026-07-29T03:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3"}
{"level":"info","ts":"2026-07-29T03:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb"}
{"level":"info","ts":"2026-07-29T03:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a"}
{"level":"info","ts":"2026-07-29T03:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/32400c98fee987dee50eaf949ea69596a70b97afabede31f66103650627abf2b"}
{"level":"info","ts":"2026-07-29T03:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59a3c24eb0a0e6105966b6cc96f2472f931bbeafc5b9c182e308bb7b9383e102"}
{"level":"info","ts":"2026-07-29T03:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07"}
{"level":"info","ts":"2026-07-29T03:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20"}
{"level":"debug","ts":"2026-07-29T03:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32400c98fee987dee50eaf949ea69596a70b97afabede31f66103650627abf2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32400c98fee987dee50eaf949ea69596a70b97afabede31f66103650627abf2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32400c98fee987dee50eaf949ea69596a70b97afabede31f66103650627abf2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32400c98fee987dee50eaf949ea69596a70b97afabede31f66103650627abf2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32400c98fee987dee50eaf949ea69596a70b97afabede31f66103650627abf2b"}
{"level":"debug","ts":"2026-07-29T03:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32400c98fee987dee50eaf949ea69596a70b97afabede31f66103650627abf2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32400c98fee987dee50eaf949ea69596a70b97afabede31f66103650627abf2b"}
{"level":"debug","ts":"2026-07-29T03:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32400c98fee987dee50eaf949ea69596a70b97afabede31f66103650627abf2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32400c98fee987dee50eaf949ea69596a70b97afabede31f66103650627abf2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32400c98fee987dee50eaf949ea69596a70b97afabede31f66103650627abf2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32400c98fee987dee50eaf949ea69596a70b97afabede31f66103650627abf2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba25a9c20418a02c8a0734f083235919fabedfecc5d5ce02b179b8c7269f0ebd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba25a9c20418a02c8a0734f083235919fabedfecc5d5ce02b179b8c7269f0ebd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba25a9c20418a02c8a0734f083235919fabedfecc5d5ce02b179b8c7269f0ebd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32400c98fee987dee50eaf949ea69596a70b97afabede31f66103650627abf2b"}
{"level":"debug","ts":"2026-07-29T03:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba25a9c20418a02c8a0734f083235919fabedfecc5d5ce02b179b8c7269f0ebd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba25a9c20418a02c8a0734f083235919fabedfecc5d5ce02b179b8c7269f0ebd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba25a9c20418a02c8a0734f083235919fabedfecc5d5ce02b179b8c7269f0ebd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba25a9c20418a02c8a0734f083235919fabedfecc5d5ce02b179b8c7269f0ebd"}
{"level":"debug","ts":"2026-07-29T03:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba25a9c20418a02c8a0734f083235919fabedfecc5d5ce02b179b8c7269f0ebd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba25a9c20418a02c8a0734f083235919fabedfecc5d5ce02b179b8c7269f0ebd"}
{"level":"debug","ts":"2026-07-29T03:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59a3c24eb0a0e6105966b6cc96f2472f931bbeafc5b9c182e308bb7b9383e102","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59a3c24eb0a0e6105966b6cc96f2472f931bbeafc5b9c182e308bb7b9383e102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59a3c24eb0a0e6105966b6cc96f2472f931bbeafc5b9c182e308bb7b9383e102"}
{"level":"info","ts":"2026-07-29T03:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59a3c24eb0a0e6105966b6cc96f2472f931bbeafc5b9c182e308bb7b9383e102","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59a3c24eb0a0e6105966b6cc96f2472f931bbeafc5b9c182e308bb7b9383e102"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59a3c24eb0a0e6105966b6cc96f2472f931bbeafc5b9c182e308bb7b9383e102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3"}
{"level":"info","ts":"2026-07-29T03:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba25a9c20418a02c8a0734f083235919fabedfecc5d5ce02b179b8c7269f0ebd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba25a9c20418a02c8a0734f083235919fabedfecc5d5ce02b179b8c7269f0ebd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59a3c24eb0a0e6105966b6cc96f2472f931bbeafc5b9c182e308bb7b9383e102"}
{"level":"info","ts":"2026-07-29T03:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba25a9c20418a02c8a0734f083235919fabedfecc5d5ce02b179b8c7269f0ebd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59a3c24eb0a0e6105966b6cc96f2472f931bbeafc5b9c182e308bb7b9383e102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba25a9c20418a02c8a0734f083235919fabedfecc5d5ce02b179b8c7269f0ebd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3"}
{"level":"debug","ts":"2026-07-29T03:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59a3c24eb0a0e6105966b6cc96f2472f931bbeafc5b9c182e308bb7b9383e102"}
{"level":"info","ts":"2026-07-29T03:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba25a9c20418a02c8a0734f083235919fabedfecc5d5ce02b179b8c7269f0ebd"}
{"level":"info","ts":"2026-07-29T03:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3"}
{"level":"debug","ts":"2026-07-29T03:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf"}
{"level":"debug","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf"}
{"level":"debug","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf"}
{"level":"debug","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3"}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07"}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3"}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07"}
{"level":"debug","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3"}
{"level":"debug","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07"}
{"level":"debug","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07"}
{"level":"debug","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a"}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07"}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb"}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a"}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07"}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb"}
{"level":"debug","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b"}
{"level":"debug","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a"}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65"}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07"}
{"level":"debug","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b"}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65"}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20"}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65"}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20"}
{"level":"debug","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:21:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65"}
{"level":"info","ts":"2026-07-29T03:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20"}
{"level":"info","ts":"2026-07-29T03:22:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27a7c2bb-043c-4b48-9136-55d0bb968fe0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38166","PortSpecifier":{"PortValue":38166}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"27a7c2bb-043c-4b48-9136-55d0bb968fe0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T03:22:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27a7c2bb-043c-4b48-9136-55d0bb968fe0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38166","PortSpecifier":{"PortValue":38166}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785295321,"nanos":32348480},"http":{"id":"27a7c2bb-043c-4b48-9136-55d0bb968fe0","method":"POST","headers":{":authority":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:22:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"27a7c2bb-043c-4b48-9136-55d0bb968fe0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T03:22:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"27a7c2bb-043c-4b48-9136-55d0bb968fe0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1618919a-3ba0-4198-a1c1-cb1ddccaf188","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f8a80838-796d-4745-8e65-dede54c057eb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e8a4b9e0ac87"]}}
{"level":"debug","ts":"2026-07-29T03:22:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"27a7c2bb-043c-4b48-9136-55d0bb968fe0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e8a4b9e0ac87"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f8a80838-796d-4745-8e65-dede54c057eb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1618919a-3ba0-4198-a1c1-cb1ddccaf188","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bc864e45ae1aa51dcc97ead2b76c25dc0bc413a02e0953ca40962805baabea0c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:22:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27a7c2bb-043c-4b48-9136-55d0bb968fe0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:22:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27a7c2bb-043c-4b48-9136-55d0bb968fe0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:22:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27a7c2bb-043c-4b48-9136-55d0bb968fe0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f4870d/auth-test-model-f4870d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f4870d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:22:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"27a7c2bb-043c-4b48-9136-55d0bb968fe0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T03:22:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27a7c2bb-043c-4b48-9136-55d0bb968fe0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T03:22:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27a7c2bb-043c-4b48-9136-55d0bb968fe0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-29T03:22:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27a7c2bb-043c-4b48-9136-55d0bb968fe0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T03:22:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27a7c2bb-043c-4b48-9136-55d0bb968fe0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T03:22:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77e772b6-4ea9-4c8b-b5a1-ce4231f53749","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:53974","PortSpecifier":{"PortValue":53974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"77e772b6-4ea9-4c8b-b5a1-ce4231f53749","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-19184d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T03:22:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77e772b6-4ea9-4c8b-b5a1-ce4231f53749","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:53974","PortSpecifier":{"PortValue":53974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785295321,"nanos":67780468},"http":{"id":"77e772b6-4ea9-4c8b-b5a1-ce4231f53749","method":"POST","headers":{":authority":"e2e-shared-b-19184d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:22:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"77e772b6-4ea9-4c8b-b5a1-ce4231f53749","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T03:22:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"77e772b6-4ea9-4c8b-b5a1-ce4231f53749","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1618919a-3ba0-4198-a1c1-cb1ddccaf188","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f8a80838-796d-4745-8e65-dede54c057eb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e8a4b9e0ac87"]}}
{"level":"debug","ts":"2026-07-29T03:22:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"77e772b6-4ea9-4c8b-b5a1-ce4231f53749","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e8a4b9e0ac87"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f8a80838-796d-4745-8e65-dede54c057eb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1618919a-3ba0-4198-a1c1-cb1ddccaf188","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-19184d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:22:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77e772b6-4ea9-4c8b-b5a1-ce4231f53749","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:22:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77e772b6-4ea9-4c8b-b5a1-ce4231f53749","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:22:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77e772b6-4ea9-4c8b-b5a1-ce4231f53749","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-19184d/auth-test-model-19184d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-19184d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:22:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"77e772b6-4ea9-4c8b-b5a1-ce4231f53749","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T03:22:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77e772b6-4ea9-4c8b-b5a1-ce4231f53749","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T03:22:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77e772b6-4ea9-4c8b-b5a1-ce4231f53749","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-29T03:22:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77e772b6-4ea9-4c8b-b5a1-ce4231f53749","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T03:22:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77e772b6-4ea9-4c8b-b5a1-ce4231f53749","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T03:22:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba6b8020-9d4e-42d6-a347-66afbb9349bf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38168","PortSpecifier":{"PortValue":38168}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ba6b8020-9d4e-42d6-a347-66afbb9349bf","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T03:22:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba6b8020-9d4e-42d6-a347-66afbb9349bf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38168","PortSpecifier":{"PortValue":38168}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785295321,"nanos":113332942},"http":{"id":"ba6b8020-9d4e-42d6-a347-66afbb9349bf","method":"POST","headers":{":authority":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:22:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ba6b8020-9d4e-42d6-a347-66afbb9349bf","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-spcVXN27eNURmAhd_NQLeT3Vu66jxsOGMa9x4eBgH0r18JElFzVqRrXEJlt7"}
{"level":"debug","ts":"2026-07-29T03:22:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ba6b8020-9d4e-42d6-a347-66afbb9349bf","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f4870d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-spcVXN27eNURmAhd_NQLeT3Vu66jxsOGMa9x4eBgH0r18JElFzVqRrXEJlt7\"}"}
{"level":"debug","ts":"2026-07-29T03:22:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ba6b8020-9d4e-42d6-a347-66afbb9349bf","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f4870d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0489da62-85c0-4980-a16c-bf70e43bab89","keyName":"e2e-auth-iso-a-2ccf92","subscription":"e2e-auth-iso-1dfc2a","tenant":"e2e-shared-a-f4870d","userId":"0489da62-85c0-4980-a16c-bf70e43bab89","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T03:22:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ba6b8020-9d4e-42d6-a347-66afbb9349bf","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:22:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba6b8020-9d4e-42d6-a347-66afbb9349bf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:22:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba6b8020-9d4e-42d6-a347-66afbb9349bf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:22:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba6b8020-9d4e-42d6-a347-66afbb9349bf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f4870d/auth-test-model-f4870d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f4870d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:22:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba6b8020-9d4e-42d6-a347-66afbb9349bf","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T03:22:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba6b8020-9d4e-42d6-a347-66afbb9349bf","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-1dfc2a"}
{"level":"debug","ts":"2026-07-29T03:22:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba6b8020-9d4e-42d6-a347-66afbb9349bf","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T03:22:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ba6b8020-9d4e-42d6-a347-66afbb9349bf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-29T03:22:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba6b8020-9d4e-42d6-a347-66afbb9349bf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T03:22:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba6b8020-9d4e-42d6-a347-66afbb9349bf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T03:22:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59bdcfb59eb26a95aff59bd8437f7a04b4964e1f2a1680d9427444082ecb14c2"}
{"level":"info","ts":"2026-07-29T03:22:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff4088534c79f10dd0df61f8a55383d4a08c8f9990de54b14d430ca3b6af7bd2"}
{"level":"info","ts":"2026-07-29T03:22:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf"}
{"level":"info","ts":"2026-07-29T03:22:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3"}
{"level":"info","ts":"2026-07-29T03:22:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/610501e18ee9fc08c64aa226b82fa9caf12c634d84e2685b0f8ef40b4067230a"}
{"level":"info","ts":"2026-07-29T03:22:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb"}
{"level":"info","ts":"2026-07-29T03:22:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba25a9c20418a02c8a0734f083235919fabedfecc5d5ce02b179b8c7269f0ebd"}
{"level":"info","ts":"2026-07-29T03:22:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4dc1aa00fe2f8b3d449c89fcf788522f3facc8a59dd12c6ef03511241e7bdd65"}
{"level":"info","ts":"2026-07-29T03:22:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef954864eee7c5b88b328af99eb02d1487e68c2fc74f2a39bb1a94e31a139e39"}
{"level":"info","ts":"2026-07-29T03:22:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04e062a59ff43aa69c890b07113b2a64775e416dec80c94f758687e825412b07"}
{"level":"info","ts":"2026-07-29T03:22:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f9e7e21ad75dc29a416a733f5fb116f6cf26c9fdc5a46202bcd40ee236ded3b"}
{"level":"info","ts":"2026-07-29T03:22:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc864e45ae1aa51dcc97ead2b76c25dc0bc413a02e0953ca40962805baabea0c"}
{"level":"info","ts":"2026-07-29T03:22:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04319778082e25f15e6e1c2ad61a5f7b3669e154e0fd34d72b493f627001b2de"}
{"level":"info","ts":"2026-07-29T03:22:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59a3c24eb0a0e6105966b6cc96f2472f931bbeafc5b9c182e308bb7b9383e102"}
{"level":"info","ts":"2026-07-29T03:22:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/32400c98fee987dee50eaf949ea69596a70b97afabede31f66103650627abf2b"}
{"level":"info","ts":"2026-07-29T03:22:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c32e3b71ce3cf0a28610df2a8ae46ecdadd3afbeca04ccb3f844efa7c61b30a"}
{"level":"info","ts":"2026-07-29T03:22:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ac181eee37f89cfef59928bf80bc866066789e45a0618354211b99870e248e0f"}
{"level":"info","ts":"2026-07-29T03:22:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2eccb7446fe36212207236ee2a243ea531685be4df2019f0b2e2d17ced267fe3"}
{"level":"info","ts":"2026-07-29T03:22:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e123619e517d7a41ca1f6b827144ba99c30165818a906809a3efe7c6bf8e3e79"}
{"level":"info","ts":"2026-07-29T03:22:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25d2ddf74e15f591b7b6b2def56ac47db0b8d1674fffe8f3c9d7f3569e8ac1a5"}
{"level":"info","ts":"2026-07-29T03:22:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58f987a96f07a7dcf24f342baefdbd0d21825802e2f4909a8d2245d6b39e9a36"}
{"level":"info","ts":"2026-07-29T03:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20"}
{"level":"info","ts":"2026-07-29T03:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5d312f7522160148fc2eaa5960984f6cd201257294ec15b75d4cdef3f1212da"}
{"level":"info","ts":"2026-07-29T03:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59b71c3a0eb9cb41a032ebd1e47e98e8d4f9a27dbff10990e2c5aaef575c8dc4"}
{"level":"debug","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84932bc3f72c7f76bf92b7959fe186fcfccfe71e2f9d6d497032063524d3a6d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:23:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:23:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84932bc3f72c7f76bf92b7959fe186fcfccfe71e2f9d6d497032063524d3a6d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84932bc3f72c7f76bf92b7959fe186fcfccfe71e2f9d6d497032063524d3a6d2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84932bc3f72c7f76bf92b7959fe186fcfccfe71e2f9d6d497032063524d3a6d2"}
{"level":"debug","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84932bc3f72c7f76bf92b7959fe186fcfccfe71e2f9d6d497032063524d3a6d2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84932bc3f72c7f76bf92b7959fe186fcfccfe71e2f9d6d497032063524d3a6d2"}
{"level":"debug","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84932bc3f72c7f76bf92b7959fe186fcfccfe71e2f9d6d497032063524d3a6d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:23:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:23:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84932bc3f72c7f76bf92b7959fe186fcfccfe71e2f9d6d497032063524d3a6d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84932bc3f72c7f76bf92b7959fe186fcfccfe71e2f9d6d497032063524d3a6d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84932bc3f72c7f76bf92b7959fe186fcfccfe71e2f9d6d497032063524d3a6d2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84932bc3f72c7f76bf92b7959fe186fcfccfe71e2f9d6d497032063524d3a6d2"}
{"level":"debug","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"610501e18ee9fc08c64aa226b82fa9caf12c634d84e2685b0f8ef40b4067230a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:23:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:23:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"610501e18ee9fc08c64aa226b82fa9caf12c634d84e2685b0f8ef40b4067230a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"610501e18ee9fc08c64aa226b82fa9caf12c634d84e2685b0f8ef40b4067230a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:23:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:23:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/610501e18ee9fc08c64aa226b82fa9caf12c634d84e2685b0f8ef40b4067230a"}
{"level":"info","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"610501e18ee9fc08c64aa226b82fa9caf12c634d84e2685b0f8ef40b4067230a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"610501e18ee9fc08c64aa226b82fa9caf12c634d84e2685b0f8ef40b4067230a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:23:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:23:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"610501e18ee9fc08c64aa226b82fa9caf12c634d84e2685b0f8ef40b4067230a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"610501e18ee9fc08c64aa226b82fa9caf12c634d84e2685b0f8ef40b4067230a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"info","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/610501e18ee9fc08c64aa226b82fa9caf12c634d84e2685b0f8ef40b4067230a"}
{"level":"debug","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"610501e18ee9fc08c64aa226b82fa9caf12c634d84e2685b0f8ef40b4067230a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"610501e18ee9fc08c64aa226b82fa9caf12c634d84e2685b0f8ef40b4067230a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/610501e18ee9fc08c64aa226b82fa9caf12c634d84e2685b0f8ef40b4067230a"}
{"level":"debug","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:23:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:23:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"610501e18ee9fc08c64aa226b82fa9caf12c634d84e2685b0f8ef40b4067230a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:23:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:23:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["610501e18ee9fc08c64aa226b82fa9caf12c634d84e2685b0f8ef40b4067230a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb"}
{"level":"info","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"610501e18ee9fc08c64aa226b82fa9caf12c634d84e2685b0f8ef40b4067230a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"610501e18ee9fc08c64aa226b82fa9caf12c634d84e2685b0f8ef40b4067230a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb"}
{"level":"info","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/610501e18ee9fc08c64aa226b82fa9caf12c634d84e2685b0f8ef40b4067230a"}
{"level":"debug","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:23:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:23:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:23:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:23:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb"}
{"level":"debug","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb"}
{"level":"debug","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:23:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:23:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc864e45ae1aa51dcc97ead2b76c25dc0bc413a02e0953ca40962805baabea0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:23:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:23:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb"}
{"level":"info","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc864e45ae1aa51dcc97ead2b76c25dc0bc413a02e0953ca40962805baabea0c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc864e45ae1aa51dcc97ead2b76c25dc0bc413a02e0953ca40962805baabea0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:23:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:23:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc864e45ae1aa51dcc97ead2b76c25dc0bc413a02e0953ca40962805baabea0c"}
{"level":"info","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc864e45ae1aa51dcc97ead2b76c25dc0bc413a02e0953ca40962805baabea0c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc864e45ae1aa51dcc97ead2b76c25dc0bc413a02e0953ca40962805baabea0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:23:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:23:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bc864e45ae1aa51dcc97ead2b76c25dc0bc413a02e0953ca40962805baabea0c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bc864e45ae1aa51dcc97ead2b76c25dc0bc413a02e0953ca40962805baabea0c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc864e45ae1aa51dcc97ead2b76c25dc0bc413a02e0953ca40962805baabea0c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc864e45ae1aa51dcc97ead2b76c25dc0bc413a02e0953ca40962805baabea0c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc864e45ae1aa51dcc97ead2b76c25dc0bc413a02e0953ca40962805baabea0c"}
{"level":"info","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc864e45ae1aa51dcc97ead2b76c25dc0bc413a02e0953ca40962805baabea0c"}
{"level":"debug","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fa93aebfdda5a7e4ba85b833d374dcbfa60e22800354e9a38603888161f7325","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:23:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:23:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fa93aebfdda5a7e4ba85b833d374dcbfa60e22800354e9a38603888161f7325","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fa93aebfdda5a7e4ba85b833d374dcbfa60e22800354e9a38603888161f7325","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:23:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:23:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fa93aebfdda5a7e4ba85b833d374dcbfa60e22800354e9a38603888161f7325"}
{"level":"info","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fa93aebfdda5a7e4ba85b833d374dcbfa60e22800354e9a38603888161f7325","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc864e45ae1aa51dcc97ead2b76c25dc0bc413a02e0953ca40962805baabea0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:23:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:23:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc864e45ae1aa51dcc97ead2b76c25dc0bc413a02e0953ca40962805baabea0c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fa93aebfdda5a7e4ba85b833d374dcbfa60e22800354e9a38603888161f7325"}
{"level":"info","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc864e45ae1aa51dcc97ead2b76c25dc0bc413a02e0953ca40962805baabea0c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fa93aebfdda5a7e4ba85b833d374dcbfa60e22800354e9a38603888161f7325","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc864e45ae1aa51dcc97ead2b76c25dc0bc413a02e0953ca40962805baabea0c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fa93aebfdda5a7e4ba85b833d374dcbfa60e22800354e9a38603888161f7325"}
{"level":"debug","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fa93aebfdda5a7e4ba85b833d374dcbfa60e22800354e9a38603888161f7325","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:23:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:23:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8fa93aebfdda5a7e4ba85b833d374dcbfa60e22800354e9a38603888161f7325"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fa93aebfdda5a7e4ba85b833d374dcbfa60e22800354e9a38603888161f7325","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fa93aebfdda5a7e4ba85b833d374dcbfa60e22800354e9a38603888161f7325","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc864e45ae1aa51dcc97ead2b76c25dc0bc413a02e0953ca40962805baabea0c"}
{"level":"debug","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25d2ddf74e15f591b7b6b2def56ac47db0b8d1674fffe8f3c9d7f3569e8ac1a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:23:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:23:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fa93aebfdda5a7e4ba85b833d374dcbfa60e22800354e9a38603888161f7325"}
{"level":"info","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25d2ddf74e15f591b7b6b2def56ac47db0b8d1674fffe8f3c9d7f3569e8ac1a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25d2ddf74e15f591b7b6b2def56ac47db0b8d1674fffe8f3c9d7f3569e8ac1a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:23:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:23:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25d2ddf74e15f591b7b6b2def56ac47db0b8d1674fffe8f3c9d7f3569e8ac1a5"}
{"level":"info","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25d2ddf74e15f591b7b6b2def56ac47db0b8d1674fffe8f3c9d7f3569e8ac1a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25d2ddf74e15f591b7b6b2def56ac47db0b8d1674fffe8f3c9d7f3569e8ac1a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:23:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:23:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"25d2ddf74e15f591b7b6b2def56ac47db0b8d1674fffe8f3c9d7f3569e8ac1a5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"25d2ddf74e15f591b7b6b2def56ac47db0b8d1674fffe8f3c9d7f3569e8ac1a5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25d2ddf74e15f591b7b6b2def56ac47db0b8d1674fffe8f3c9d7f3569e8ac1a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25d2ddf74e15f591b7b6b2def56ac47db0b8d1674fffe8f3c9d7f3569e8ac1a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25d2ddf74e15f591b7b6b2def56ac47db0b8d1674fffe8f3c9d7f3569e8ac1a5"}
{"level":"info","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25d2ddf74e15f591b7b6b2def56ac47db0b8d1674fffe8f3c9d7f3569e8ac1a5"}
{"level":"debug","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6dee696a8a4f2d95ab0b7531cbf3e53923d6e49026b20995d3f0a735bcdb9a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:23:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:23:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6dee696a8a4f2d95ab0b7531cbf3e53923d6e49026b20995d3f0a735bcdb9a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6dee696a8a4f2d95ab0b7531cbf3e53923d6e49026b20995d3f0a735bcdb9a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25d2ddf74e15f591b7b6b2def56ac47db0b8d1674fffe8f3c9d7f3569e8ac1a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:23:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:23:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25d2ddf74e15f591b7b6b2def56ac47db0b8d1674fffe8f3c9d7f3569e8ac1a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6dee696a8a4f2d95ab0b7531cbf3e53923d6e49026b20995d3f0a735bcdb9a9"}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25d2ddf74e15f591b7b6b2def56ac47db0b8d1674fffe8f3c9d7f3569e8ac1a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6dee696a8a4f2d95ab0b7531cbf3e53923d6e49026b20995d3f0a735bcdb9a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25d2ddf74e15f591b7b6b2def56ac47db0b8d1674fffe8f3c9d7f3569e8ac1a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6dee696a8a4f2d95ab0b7531cbf3e53923d6e49026b20995d3f0a735bcdb9a9"}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6dee696a8a4f2d95ab0b7531cbf3e53923d6e49026b20995d3f0a735bcdb9a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d6dee696a8a4f2d95ab0b7531cbf3e53923d6e49026b20995d3f0a735bcdb9a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25d2ddf74e15f591b7b6b2def56ac47db0b8d1674fffe8f3c9d7f3569e8ac1a5"}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6dee696a8a4f2d95ab0b7531cbf3e53923d6e49026b20995d3f0a735bcdb9a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6dee696a8a4f2d95ab0b7531cbf3e53923d6e49026b20995d3f0a735bcdb9a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6dee696a8a4f2d95ab0b7531cbf3e53923d6e49026b20995d3f0a735bcdb9a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6dee696a8a4f2d95ab0b7531cbf3e53923d6e49026b20995d3f0a735bcdb9a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6dee696a8a4f2d95ab0b7531cbf3e53923d6e49026b20995d3f0a735bcdb9a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6dee696a8a4f2d95ab0b7531cbf3e53923d6e49026b20995d3f0a735bcdb9a9"}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5549eeb02ba188c30c27058279703cf0d1237615ea2b44c37a94a07c6d1fd0a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5549eeb02ba188c30c27058279703cf0d1237615ea2b44c37a94a07c6d1fd0a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6dee696a8a4f2d95ab0b7531cbf3e53923d6e49026b20995d3f0a735bcdb9a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d6dee696a8a4f2d95ab0b7531cbf3e53923d6e49026b20995d3f0a735bcdb9a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6dee696a8a4f2d95ab0b7531cbf3e53923d6e49026b20995d3f0a735bcdb9a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5549eeb02ba188c30c27058279703cf0d1237615ea2b44c37a94a07c6d1fd0a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6dee696a8a4f2d95ab0b7531cbf3e53923d6e49026b20995d3f0a735bcdb9a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5549eeb02ba188c30c27058279703cf0d1237615ea2b44c37a94a07c6d1fd0a8"}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5549eeb02ba188c30c27058279703cf0d1237615ea2b44c37a94a07c6d1fd0a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5549eeb02ba188c30c27058279703cf0d1237615ea2b44c37a94a07c6d1fd0a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5549eeb02ba188c30c27058279703cf0d1237615ea2b44c37a94a07c6d1fd0a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5549eeb02ba188c30c27058279703cf0d1237615ea2b44c37a94a07c6d1fd0a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6dee696a8a4f2d95ab0b7531cbf3e53923d6e49026b20995d3f0a735bcdb9a9"}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0670cd8a20ac8055daa153ae07ab299462442d10339b0201e9e870f6dc9923e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5549eeb02ba188c30c27058279703cf0d1237615ea2b44c37a94a07c6d1fd0a8"}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0670cd8a20ac8055daa153ae07ab299462442d10339b0201e9e870f6dc9923e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0670cd8a20ac8055daa153ae07ab299462442d10339b0201e9e870f6dc9923e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0670cd8a20ac8055daa153ae07ab299462442d10339b0201e9e870f6dc9923e7"}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0670cd8a20ac8055daa153ae07ab299462442d10339b0201e9e870f6dc9923e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0670cd8a20ac8055daa153ae07ab299462442d10339b0201e9e870f6dc9923e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0670cd8a20ac8055daa153ae07ab299462442d10339b0201e9e870f6dc9923e7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0670cd8a20ac8055daa153ae07ab299462442d10339b0201e9e870f6dc9923e7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0670cd8a20ac8055daa153ae07ab299462442d10339b0201e9e870f6dc9923e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0670cd8a20ac8055daa153ae07ab299462442d10339b0201e9e870f6dc9923e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0670cd8a20ac8055daa153ae07ab299462442d10339b0201e9e870f6dc9923e7"}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0670cd8a20ac8055daa153ae07ab299462442d10339b0201e9e870f6dc9923e7"}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40c3b91699b4868f833757d279f13431c84290f9cb4a3e88d2d7839ce2c49187","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40c3b91699b4868f833757d279f13431c84290f9cb4a3e88d2d7839ce2c49187","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40c3b91699b4868f833757d279f13431c84290f9cb4a3e88d2d7839ce2c49187","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0670cd8a20ac8055daa153ae07ab299462442d10339b0201e9e870f6dc9923e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0670cd8a20ac8055daa153ae07ab299462442d10339b0201e9e870f6dc9923e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40c3b91699b4868f833757d279f13431c84290f9cb4a3e88d2d7839ce2c49187"}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0670cd8a20ac8055daa153ae07ab299462442d10339b0201e9e870f6dc9923e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40c3b91699b4868f833757d279f13431c84290f9cb4a3e88d2d7839ce2c49187","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0670cd8a20ac8055daa153ae07ab299462442d10339b0201e9e870f6dc9923e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40c3b91699b4868f833757d279f13431c84290f9cb4a3e88d2d7839ce2c49187"}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40c3b91699b4868f833757d279f13431c84290f9cb4a3e88d2d7839ce2c49187","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40c3b91699b4868f833757d279f13431c84290f9cb4a3e88d2d7839ce2c49187"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0670cd8a20ac8055daa153ae07ab299462442d10339b0201e9e870f6dc9923e7"}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40c3b91699b4868f833757d279f13431c84290f9cb4a3e88d2d7839ce2c49187","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40c3b91699b4868f833757d279f13431c84290f9cb4a3e88d2d7839ce2c49187","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40c3b91699b4868f833757d279f13431c84290f9cb4a3e88d2d7839ce2c49187","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40c3b91699b4868f833757d279f13431c84290f9cb4a3e88d2d7839ce2c49187"}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40c3b91699b4868f833757d279f13431c84290f9cb4a3e88d2d7839ce2c49187","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40c3b91699b4868f833757d279f13431c84290f9cb4a3e88d2d7839ce2c49187"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3"}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40c3b91699b4868f833757d279f13431c84290f9cb4a3e88d2d7839ce2c49187","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40c3b91699b4868f833757d279f13431c84290f9cb4a3e88d2d7839ce2c49187"}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40c3b91699b4868f833757d279f13431c84290f9cb4a3e88d2d7839ce2c49187","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3"}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40c3b91699b4868f833757d279f13431c84290f9cb4a3e88d2d7839ce2c49187"}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"670f47c7177fb214c84e321cd368987821789855acd1778a1a13d442543ec7b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3"}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"670f47c7177fb214c84e321cd368987821789855acd1778a1a13d442543ec7b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"670f47c7177fb214c84e321cd368987821789855acd1778a1a13d442543ec7b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"670f47c7177fb214c84e321cd368987821789855acd1778a1a13d442543ec7b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"670f47c7177fb214c84e321cd368987821789855acd1778a1a13d442543ec7b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/670f47c7177fb214c84e321cd368987821789855acd1778a1a13d442543ec7b3"}
{"level":"error","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"670f47c7177fb214c84e321cd368987821789855acd1778a1a13d442543ec7b3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"670f47c7177fb214c84e321cd368987821789855acd1778a1a13d442543ec7b3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"670f47c7177fb214c84e321cd368987821789855acd1778a1a13d442543ec7b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"670f47c7177fb214c84e321cd368987821789855acd1778a1a13d442543ec7b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/670f47c7177fb214c84e321cd368987821789855acd1778a1a13d442543ec7b3"}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/670f47c7177fb214c84e321cd368987821789855acd1778a1a13d442543ec7b3"}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef954864eee7c5b88b328af99eb02d1487e68c2fc74f2a39bb1a94e31a139e39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef954864eee7c5b88b328af99eb02d1487e68c2fc74f2a39bb1a94e31a139e39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"379c5d7ca541198d8d8a9f7f0f485a33d884b497516ec2714d7002ad92d108d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef954864eee7c5b88b328af99eb02d1487e68c2fc74f2a39bb1a94e31a139e39"}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"379c5d7ca541198d8d8a9f7f0f485a33d884b497516ec2714d7002ad92d108d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef954864eee7c5b88b328af99eb02d1487e68c2fc74f2a39bb1a94e31a139e39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef954864eee7c5b88b328af99eb02d1487e68c2fc74f2a39bb1a94e31a139e39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/379c5d7ca541198d8d8a9f7f0f485a33d884b497516ec2714d7002ad92d108d8"}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef954864eee7c5b88b328af99eb02d1487e68c2fc74f2a39bb1a94e31a139e39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"670f47c7177fb214c84e321cd368987821789855acd1778a1a13d442543ec7b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["670f47c7177fb214c84e321cd368987821789855acd1778a1a13d442543ec7b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"670f47c7177fb214c84e321cd368987821789855acd1778a1a13d442543ec7b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55d0919c076c3f694277a85e07ffc23207e12e0f13ae3dcf9ef62a1b330b9884","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef954864eee7c5b88b328af99eb02d1487e68c2fc74f2a39bb1a94e31a139e39"}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55d0919c076c3f694277a85e07ffc23207e12e0f13ae3dcf9ef62a1b330b9884","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"379c5d7ca541198d8d8a9f7f0f485a33d884b497516ec2714d7002ad92d108d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["379c5d7ca541198d8d8a9f7f0f485a33d884b497516ec2714d7002ad92d108d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55d0919c076c3f694277a85e07ffc23207e12e0f13ae3dcf9ef62a1b330b9884"}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"379c5d7ca541198d8d8a9f7f0f485a33d884b497516ec2714d7002ad92d108d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef954864eee7c5b88b328af99eb02d1487e68c2fc74f2a39bb1a94e31a139e39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"670f47c7177fb214c84e321cd368987821789855acd1778a1a13d442543ec7b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55d0919c076c3f694277a85e07ffc23207e12e0f13ae3dcf9ef62a1b330b9884","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55d0919c076c3f694277a85e07ffc23207e12e0f13ae3dcf9ef62a1b330b9884"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/379c5d7ca541198d8d8a9f7f0f485a33d884b497516ec2714d7002ad92d108d8"}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55d0919c076c3f694277a85e07ffc23207e12e0f13ae3dcf9ef62a1b330b9884","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"379c5d7ca541198d8d8a9f7f0f485a33d884b497516ec2714d7002ad92d108d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3d84b14a3fe8f17ddb43f0888533278e54deea622a6d8d55afd8203646b7655","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf"}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3d84b14a3fe8f17ddb43f0888533278e54deea622a6d8d55afd8203646b7655","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7fd5d1eb7b9e9b32aa93e5306c37cff3577920d306c586cabf0207c4a0862c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/670f47c7177fb214c84e321cd368987821789855acd1778a1a13d442543ec7b3"}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7fd5d1eb7b9e9b32aa93e5306c37cff3577920d306c586cabf0207c4a0862c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55d0919c076c3f694277a85e07ffc23207e12e0f13ae3dcf9ef62a1b330b9884","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e22f57bd55fb2f20ff57f27675700dfaf62e0c49f40fb33608f9499e744bea1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef954864eee7c5b88b328af99eb02d1487e68c2fc74f2a39bb1a94e31a139e39"}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e22f57bd55fb2f20ff57f27675700dfaf62e0c49f40fb33608f9499e744bea1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3d84b14a3fe8f17ddb43f0888533278e54deea622a6d8d55afd8203646b7655","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7fd5d1eb7b9e9b32aa93e5306c37cff3577920d306c586cabf0207c4a0862c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e22f57bd55fb2f20ff57f27675700dfaf62e0c49f40fb33608f9499e744bea1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e22f57bd55fb2f20ff57f27675700dfaf62e0c49f40fb33608f9499e744bea1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3d84b14a3fe8f17ddb43f0888533278e54deea622a6d8d55afd8203646b7655","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7fd5d1eb7b9e9b32aa93e5306c37cff3577920d306c586cabf0207c4a0862c4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55d0919c076c3f694277a85e07ffc23207e12e0f13ae3dcf9ef62a1b330b9884"}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9b0a2193341fc70c7b608f24c8eb7f7404c31fd994955b5c23cb442f890a152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3d84b14a3fe8f17ddb43f0888533278e54deea622a6d8d55afd8203646b7655"}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9b0a2193341fc70c7b608f24c8eb7f7404c31fd994955b5c23cb442f890a152","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e22f57bd55fb2f20ff57f27675700dfaf62e0c49f40fb33608f9499e744bea1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3d84b14a3fe8f17ddb43f0888533278e54deea622a6d8d55afd8203646b7655","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3d84b14a3fe8f17ddb43f0888533278e54deea622a6d8d55afd8203646b7655"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3d84b14a3fe8f17ddb43f0888533278e54deea622a6d8d55afd8203646b7655","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7fd5d1eb7b9e9b32aa93e5306c37cff3577920d306c586cabf0207c4a0862c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9b0a2193341fc70c7b608f24c8eb7f7404c31fd994955b5c23cb442f890a152","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/379c5d7ca541198d8d8a9f7f0f485a33d884b497516ec2714d7002ad92d108d8"}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3d84b14a3fe8f17ddb43f0888533278e54deea622a6d8d55afd8203646b7655","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac3dc357beabc1151795de445cbdd8455a0226bd33d7a983ceaed735652dfd97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7fd5d1eb7b9e9b32aa93e5306c37cff3577920d306c586cabf0207c4a0862c4"}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac3dc357beabc1151795de445cbdd8455a0226bd33d7a983ceaed735652dfd97","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9b0a2193341fc70c7b608f24c8eb7f7404c31fd994955b5c23cb442f890a152","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11faf941a56a8d9acf091691c51c5695df455fbb8cfa44d138742c15b1aac5eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e22f57bd55fb2f20ff57f27675700dfaf62e0c49f40fb33608f9499e744bea1a"}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11faf941a56a8d9acf091691c51c5695df455fbb8cfa44d138742c15b1aac5eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e22f57bd55fb2f20ff57f27675700dfaf62e0c49f40fb33608f9499e744bea1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e22f57bd55fb2f20ff57f27675700dfaf62e0c49f40fb33608f9499e744bea1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e22f57bd55fb2f20ff57f27675700dfaf62e0c49f40fb33608f9499e744bea1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac3dc357beabc1151795de445cbdd8455a0226bd33d7a983ceaed735652dfd97","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7fd5d1eb7b9e9b32aa93e5306c37cff3577920d306c586cabf0207c4a0862c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e7fd5d1eb7b9e9b32aa93e5306c37cff3577920d306c586cabf0207c4a0862c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf"}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7fd5d1eb7b9e9b32aa93e5306c37cff3577920d306c586cabf0207c4a0862c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11faf941a56a8d9acf091691c51c5695df455fbb8cfa44d138742c15b1aac5eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9b0a2193341fc70c7b608f24c8eb7f7404c31fd994955b5c23cb442f890a152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9b0a2193341fc70c7b608f24c8eb7f7404c31fd994955b5c23cb442f890a152"}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9b0a2193341fc70c7b608f24c8eb7f7404c31fd994955b5c23cb442f890a152","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e22f57bd55fb2f20ff57f27675700dfaf62e0c49f40fb33608f9499e744bea1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac3dc357beabc1151795de445cbdd8455a0226bd33d7a983ceaed735652dfd97","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56e7ab09ff26ed11c2f84848d6ae0a0d35ddecbbf19f93dfaf5e3037164e9c57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20"}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3d84b14a3fe8f17ddb43f0888533278e54deea622a6d8d55afd8203646b7655"}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56e7ab09ff26ed11c2f84848d6ae0a0d35ddecbbf19f93dfaf5e3037164e9c57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7fd5d1eb7b9e9b32aa93e5306c37cff3577920d306c586cabf0207c4a0862c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:23:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac3dc357beabc1151795de445cbdd8455a0226bd33d7a983ceaed735652dfd97"}
{"level":"info","ts":"2026-07-29T03:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11faf941a56a8d9acf091691c51c5695df455fbb8cfa44d138742c15b1aac5eb"}
{"level":"info","ts":"2026-07-29T03:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e22f57bd55fb2f20ff57f27675700dfaf62e0c49f40fb33608f9499e744bea1a"}
{"level":"info","ts":"2026-07-29T03:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11faf941a56a8d9acf091691c51c5695df455fbb8cfa44d138742c15b1aac5eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:23:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:23:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11faf941a56a8d9acf091691c51c5695df455fbb8cfa44d138742c15b1aac5eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56e7ab09ff26ed11c2f84848d6ae0a0d35ddecbbf19f93dfaf5e3037164e9c57"}
{"level":"info","ts":"2026-07-29T03:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11faf941a56a8d9acf091691c51c5695df455fbb8cfa44d138742c15b1aac5eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9b0a2193341fc70c7b608f24c8eb7f7404c31fd994955b5c23cb442f890a152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:23:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:23:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9b0a2193341fc70c7b608f24c8eb7f7404c31fd994955b5c23cb442f890a152"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7fd5d1eb7b9e9b32aa93e5306c37cff3577920d306c586cabf0207c4a0862c4"}
{"level":"info","ts":"2026-07-29T03:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9b0a2193341fc70c7b608f24c8eb7f7404c31fd994955b5c23cb442f890a152","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac3dc357beabc1151795de445cbdd8455a0226bd33d7a983ceaed735652dfd97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:23:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:23:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac3dc357beabc1151795de445cbdd8455a0226bd33d7a983ceaed735652dfd97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9b0a2193341fc70c7b608f24c8eb7f7404c31fd994955b5c23cb442f890a152"}
{"level":"info","ts":"2026-07-29T03:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20"}
{"level":"info","ts":"2026-07-29T03:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac3dc357beabc1151795de445cbdd8455a0226bd33d7a983ceaed735652dfd97","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56e7ab09ff26ed11c2f84848d6ae0a0d35ddecbbf19f93dfaf5e3037164e9c57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:23:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:23:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56e7ab09ff26ed11c2f84848d6ae0a0d35ddecbbf19f93dfaf5e3037164e9c57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11faf941a56a8d9acf091691c51c5695df455fbb8cfa44d138742c15b1aac5eb"}
{"level":"info","ts":"2026-07-29T03:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9b0a2193341fc70c7b608f24c8eb7f7404c31fd994955b5c23cb442f890a152"}
{"level":"info","ts":"2026-07-29T03:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac3dc357beabc1151795de445cbdd8455a0226bd33d7a983ceaed735652dfd97"}
{"level":"info","ts":"2026-07-29T03:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56e7ab09ff26ed11c2f84848d6ae0a0d35ddecbbf19f93dfaf5e3037164e9c57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11faf941a56a8d9acf091691c51c5695df455fbb8cfa44d138742c15b1aac5eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9b0a2193341fc70c7b608f24c8eb7f7404c31fd994955b5c23cb442f890a152","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac3dc357beabc1151795de445cbdd8455a0226bd33d7a983ceaed735652dfd97","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56e7ab09ff26ed11c2f84848d6ae0a0d35ddecbbf19f93dfaf5e3037164e9c57","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56e7ab09ff26ed11c2f84848d6ae0a0d35ddecbbf19f93dfaf5e3037164e9c57"}
{"level":"info","ts":"2026-07-29T03:23:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea4d6d3e-992f-414f-9aa8-a6f7cd6d7462","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43832","PortSpecifier":{"PortValue":43832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ea4d6d3e-992f-414f-9aa8-a6f7cd6d7462","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T03:23:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea4d6d3e-992f-414f-9aa8-a6f7cd6d7462","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43832","PortSpecifier":{"PortValue":43832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785295405,"nanos":986744531},"http":{"id":"ea4d6d3e-992f-414f-9aa8-a6f7cd6d7462","method":"POST","headers":{":authority":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:23:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ea4d6d3e-992f-414f-9aa8-a6f7cd6d7462","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T03:23:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ea4d6d3e-992f-414f-9aa8-a6f7cd6d7462","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1618919a-3ba0-4198-a1c1-cb1ddccaf188","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f8a80838-796d-4745-8e65-dede54c057eb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e8a4b9e0ac87"]}}
{"level":"debug","ts":"2026-07-29T03:23:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ea4d6d3e-992f-414f-9aa8-a6f7cd6d7462","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e8a4b9e0ac87"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f8a80838-796d-4745-8e65-dede54c057eb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1618919a-3ba0-4198-a1c1-cb1ddccaf188","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bc864e45ae1aa51dcc97ead2b76c25dc0bc413a02e0953ca40962805baabea0c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:23:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea4d6d3e-992f-414f-9aa8-a6f7cd6d7462","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:23:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea4d6d3e-992f-414f-9aa8-a6f7cd6d7462","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:23:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea4d6d3e-992f-414f-9aa8-a6f7cd6d7462","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f4870d/sub-test-model-f4870d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f4870d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:23:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ea4d6d3e-992f-414f-9aa8-a6f7cd6d7462","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T03:23:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea4d6d3e-992f-414f-9aa8-a6f7cd6d7462","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T03:23:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea4d6d3e-992f-414f-9aa8-a6f7cd6d7462","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-29T03:23:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea4d6d3e-992f-414f-9aa8-a6f7cd6d7462","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T03:23:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea4d6d3e-992f-414f-9aa8-a6f7cd6d7462","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T03:23:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"605601cf-d951-40b3-add3-07dd425f6249","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34834","PortSpecifier":{"PortValue":34834}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"605601cf-d951-40b3-add3-07dd425f6249","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-19184d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T03:23:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"605601cf-d951-40b3-add3-07dd425f6249","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34834","PortSpecifier":{"PortValue":34834}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785295406,"nanos":24770172},"http":{"id":"605601cf-d951-40b3-add3-07dd425f6249","method":"POST","headers":{":authority":"e2e-shared-b-19184d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:23:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"605601cf-d951-40b3-add3-07dd425f6249","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T03:23:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"605601cf-d951-40b3-add3-07dd425f6249","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1618919a-3ba0-4198-a1c1-cb1ddccaf188","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f8a80838-796d-4745-8e65-dede54c057eb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e8a4b9e0ac87"]}}
{"level":"debug","ts":"2026-07-29T03:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"605601cf-d951-40b3-add3-07dd425f6249","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e8a4b9e0ac87"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f8a80838-796d-4745-8e65-dede54c057eb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1618919a-3ba0-4198-a1c1-cb1ddccaf188","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-19184d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"605601cf-d951-40b3-add3-07dd425f6249","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"605601cf-d951-40b3-add3-07dd425f6249","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"605601cf-d951-40b3-add3-07dd425f6249","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-19184d/sub-test-model-19184d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-19184d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:23:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"605601cf-d951-40b3-add3-07dd425f6249","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T03:23:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"605601cf-d951-40b3-add3-07dd425f6249","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T03:23:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"605601cf-d951-40b3-add3-07dd425f6249","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-29T03:23:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"605601cf-d951-40b3-add3-07dd425f6249","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T03:23:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"605601cf-d951-40b3-add3-07dd425f6249","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T03:23:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d9b6e8f-e50e-42d4-94af-3aa3c3fe02d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43848","PortSpecifier":{"PortValue":43848}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0d9b6e8f-e50e-42d4-94af-3aa3c3fe02d7","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T03:23:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d9b6e8f-e50e-42d4-94af-3aa3c3fe02d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43848","PortSpecifier":{"PortValue":43848}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785295406,"nanos":60331787},"http":{"id":"0d9b6e8f-e50e-42d4-94af-3aa3c3fe02d7","method":"GET","headers":{":authority":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:23:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0d9b6e8f-e50e-42d4-94af-3aa3c3fe02d7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-kI6A8kzLMvD1TsUV_RGPuWgFrsb2figWUpUtq67dUqU3Qgiape3fgZQJdVh4"}
{"level":"debug","ts":"2026-07-29T03:23:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0d9b6e8f-e50e-42d4-94af-3aa3c3fe02d7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f4870d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-kI6A8kzLMvD1TsUV_RGPuWgFrsb2figWUpUtq67dUqU3Qgiape3fgZQJdVh4\"}"}
{"level":"debug","ts":"2026-07-29T03:23:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0d9b6e8f-e50e-42d4-94af-3aa3c3fe02d7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f4870d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"41a8e5c0-3f25-4793-9d4e-6275692346ce","keyName":"e2e-sub-iso-8be46c","subscription":"e2e-a-only-e60b1e","tenant":"e2e-shared-a-f4870d","userId":"41a8e5c0-3f25-4793-9d4e-6275692346ce","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T03:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0d9b6e8f-e50e-42d4-94af-3aa3c3fe02d7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d9b6e8f-e50e-42d4-94af-3aa3c3fe02d7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d9b6e8f-e50e-42d4-94af-3aa3c3fe02d7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d9b6e8f-e50e-42d4-94af-3aa3c3fe02d7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f4870d/sub-test-model-f4870d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f4870d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:23:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0d9b6e8f-e50e-42d4-94af-3aa3c3fe02d7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-29T03:23:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d9b6e8f-e50e-42d4-94af-3aa3c3fe02d7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T03:23:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d9b6e8f-e50e-42d4-94af-3aa3c3fe02d7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-e60b1e"}
{"level":"debug","ts":"2026-07-29T03:23:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d9b6e8f-e50e-42d4-94af-3aa3c3fe02d7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-29T03:23:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d9b6e8f-e50e-42d4-94af-3aa3c3fe02d7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T03:23:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d9b6e8f-e50e-42d4-94af-3aa3c3fe02d7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T03:23:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb8f8692-336e-4af3-867c-91111b603052","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34836","PortSpecifier":{"PortValue":34836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cb8f8692-336e-4af3-867c-91111b603052","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-19184d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T03:23:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb8f8692-336e-4af3-867c-91111b603052","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34836","PortSpecifier":{"PortValue":34836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785295406,"nanos":98302757},"http":{"id":"cb8f8692-336e-4af3-867c-91111b603052","method":"GET","headers":{":authority":"e2e-shared-b-19184d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:23:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cb8f8692-336e-4af3-867c-91111b603052","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1XpdNhFvCufwEwpsh_j2tVaRIKhUI10UDJAupY26OrFIJ7hdZchp4r91gbh6u"}
{"level":"debug","ts":"2026-07-29T03:23:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cb8f8692-336e-4af3-867c-91111b603052","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-19184d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1XpdNhFvCufwEwpsh_j2tVaRIKhUI10UDJAupY26OrFIJ7hdZchp4r91gbh6u\"}"}
{"level":"debug","ts":"2026-07-29T03:23:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cb8f8692-336e-4af3-867c-91111b603052","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-19184d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"585384e6-975d-41ba-8084-68026273f281","keyName":"e2e-sub-iso-9d4d27","subscription":"e2e-b-only-e60b1e","tenant":"e2e-shared-b-19184d","userId":"585384e6-975d-41ba-8084-68026273f281","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T03:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cb8f8692-336e-4af3-867c-91111b603052","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb8f8692-336e-4af3-867c-91111b603052","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb8f8692-336e-4af3-867c-91111b603052","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb8f8692-336e-4af3-867c-91111b603052","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-19184d/sub-test-model-19184d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-19184d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:23:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb8f8692-336e-4af3-867c-91111b603052","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T03:23:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cb8f8692-336e-4af3-867c-91111b603052","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-29T03:23:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb8f8692-336e-4af3-867c-91111b603052","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T03:23:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb8f8692-336e-4af3-867c-91111b603052","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-e60b1e"}
{"level":"info","ts":"2026-07-29T03:23:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb8f8692-336e-4af3-867c-91111b603052","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T03:23:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb8f8692-336e-4af3-867c-91111b603052","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b5a48f0-1576-4df2-9a85-e989f6bc6347","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:49630","PortSpecifier":{"PortValue":49630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5b5a48f0-1576-4df2-9a85-e989f6bc6347","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b5a48f0-1576-4df2-9a85-e989f6bc6347","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:49630","PortSpecifier":{"PortValue":49630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785295425,"nanos":719765803},"http":{"id":"5b5a48f0-1576-4df2-9a85-e989f6bc6347","method":"POST","headers":{":authority":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5b5a48f0-1576-4df2-9a85-e989f6bc6347","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5b5a48f0-1576-4df2-9a85-e989f6bc6347","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1618919a-3ba0-4198-a1c1-cb1ddccaf188","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f8a80838-796d-4745-8e65-dede54c057eb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e8a4b9e0ac87"]}}
{"level":"debug","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5b5a48f0-1576-4df2-9a85-e989f6bc6347","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e8a4b9e0ac87"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f8a80838-796d-4745-8e65-dede54c057eb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1618919a-3ba0-4198-a1c1-cb1ddccaf188","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bc864e45ae1aa51dcc97ead2b76c25dc0bc413a02e0953ca40962805baabea0c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b5a48f0-1576-4df2-9a85-e989f6bc6347","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b5a48f0-1576-4df2-9a85-e989f6bc6347","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b5a48f0-1576-4df2-9a85-e989f6bc6347","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f4870d/sub-test-model-f4870d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f4870d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5b5a48f0-1576-4df2-9a85-e989f6bc6347","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b5a48f0-1576-4df2-9a85-e989f6bc6347","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b5a48f0-1576-4df2-9a85-e989f6bc6347","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b5a48f0-1576-4df2-9a85-e989f6bc6347","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b5a48f0-1576-4df2-9a85-e989f6bc6347","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"235596db-bc31-47b1-88a1-d0bd67af69db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50298","PortSpecifier":{"PortValue":50298}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"235596db-bc31-47b1-88a1-d0bd67af69db","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-19184d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"235596db-bc31-47b1-88a1-d0bd67af69db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50298","PortSpecifier":{"PortValue":50298}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785295425,"nanos":750598640},"http":{"id":"235596db-bc31-47b1-88a1-d0bd67af69db","method":"POST","headers":{":authority":"e2e-shared-b-19184d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"235596db-bc31-47b1-88a1-d0bd67af69db","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"235596db-bc31-47b1-88a1-d0bd67af69db","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1618919a-3ba0-4198-a1c1-cb1ddccaf188","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f8a80838-796d-4745-8e65-dede54c057eb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e8a4b9e0ac87"]}}
{"level":"debug","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"235596db-bc31-47b1-88a1-d0bd67af69db","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e8a4b9e0ac87"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f8a80838-796d-4745-8e65-dede54c057eb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1618919a-3ba0-4198-a1c1-cb1ddccaf188","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-19184d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"235596db-bc31-47b1-88a1-d0bd67af69db","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"235596db-bc31-47b1-88a1-d0bd67af69db","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"235596db-bc31-47b1-88a1-d0bd67af69db","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-19184d/sub-test-model-19184d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-19184d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"235596db-bc31-47b1-88a1-d0bd67af69db","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"235596db-bc31-47b1-88a1-d0bd67af69db","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"235596db-bc31-47b1-88a1-d0bd67af69db","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"235596db-bc31-47b1-88a1-d0bd67af69db","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"235596db-bc31-47b1-88a1-d0bd67af69db","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69a3983d-8e16-4201-a221-4397272a9ec8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:49632","PortSpecifier":{"PortValue":49632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"69a3983d-8e16-4201-a221-4397272a9ec8","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69a3983d-8e16-4201-a221-4397272a9ec8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:49632","PortSpecifier":{"PortValue":49632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785295425,"nanos":787729671},"http":{"id":"69a3983d-8e16-4201-a221-4397272a9ec8","method":"POST","headers":{":authority":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"69a3983d-8e16-4201-a221-4397272a9ec8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3Q3LjmuVemJbsYds_hz5sAH4a90pU5QZego7AUbHgGc7nI7VNX1D6TTEdF16"}
{"level":"debug","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"69a3983d-8e16-4201-a221-4397272a9ec8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f4870d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3Q3LjmuVemJbsYds_hz5sAH4a90pU5QZego7AUbHgGc7nI7VNX1D6TTEdF16\"}"}
{"level":"debug","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"69a3983d-8e16-4201-a221-4397272a9ec8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f4870d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c4d86f96-3df0-4a12-bc2d-698ae83228b1","keyName":"e2e-sub-iso-5c23bd","subscription":"e2e-shared-sub-ac83d4","tenant":"e2e-shared-a-f4870d","userId":"c4d86f96-3df0-4a12-bc2d-698ae83228b1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"69a3983d-8e16-4201-a221-4397272a9ec8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69a3983d-8e16-4201-a221-4397272a9ec8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69a3983d-8e16-4201-a221-4397272a9ec8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69a3983d-8e16-4201-a221-4397272a9ec8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f4870d/sub-test-model-f4870d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f4870d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"69a3983d-8e16-4201-a221-4397272a9ec8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69a3983d-8e16-4201-a221-4397272a9ec8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69a3983d-8e16-4201-a221-4397272a9ec8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69a3983d-8e16-4201-a221-4397272a9ec8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-ac83d4"}
{"level":"info","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69a3983d-8e16-4201-a221-4397272a9ec8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69a3983d-8e16-4201-a221-4397272a9ec8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"18789dc4-82b3-4f48-8d7b-87774920e738","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50304","PortSpecifier":{"PortValue":50304}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"18789dc4-82b3-4f48-8d7b-87774920e738","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-19184d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"18789dc4-82b3-4f48-8d7b-87774920e738","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50304","PortSpecifier":{"PortValue":50304}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785295425,"nanos":815434094},"http":{"id":"18789dc4-82b3-4f48-8d7b-87774920e738","method":"POST","headers":{":authority":"e2e-shared-b-19184d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"18789dc4-82b3-4f48-8d7b-87774920e738","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ta1nxZzMNIPLblmD_Gm6s4zUVg0Ke6BaFqwGbABW6K9Dsd04A4Ij9OCONtv0"}
{"level":"debug","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"18789dc4-82b3-4f48-8d7b-87774920e738","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-19184d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ta1nxZzMNIPLblmD_Gm6s4zUVg0Ke6BaFqwGbABW6K9Dsd04A4Ij9OCONtv0\"}"}
{"level":"debug","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"18789dc4-82b3-4f48-8d7b-87774920e738","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-19184d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"216d3499-909e-4ca4-89d2-5d4331daeae0","keyName":"e2e-sub-iso-f349b4","subscription":"e2e-shared-sub-ac83d4","tenant":"e2e-shared-b-19184d","userId":"216d3499-909e-4ca4-89d2-5d4331daeae0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"18789dc4-82b3-4f48-8d7b-87774920e738","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18789dc4-82b3-4f48-8d7b-87774920e738","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18789dc4-82b3-4f48-8d7b-87774920e738","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18789dc4-82b3-4f48-8d7b-87774920e738","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-19184d/sub-test-model-19184d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-19184d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"18789dc4-82b3-4f48-8d7b-87774920e738","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"18789dc4-82b3-4f48-8d7b-87774920e738","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"18789dc4-82b3-4f48-8d7b-87774920e738","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"18789dc4-82b3-4f48-8d7b-87774920e738","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-ac83d4"}
{"level":"info","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"18789dc4-82b3-4f48-8d7b-87774920e738","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T03:23:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"18789dc4-82b3-4f48-8d7b-87774920e738","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T03:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/670f47c7177fb214c84e321cd368987821789855acd1778a1a13d442543ec7b3"}
{"level":"info","ts":"2026-07-29T03:23:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8fa93aebfdda5a7e4ba85b833d374dcbfa60e22800354e9a38603888161f7325"}
{"level":"info","ts":"2026-07-29T03:23:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20"}
{"level":"info","ts":"2026-07-29T03:23:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11faf941a56a8d9acf091691c51c5695df455fbb8cfa44d138742c15b1aac5eb"}
{"level":"info","ts":"2026-07-29T03:23:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e7fd5d1eb7b9e9b32aa93e5306c37cff3577920d306c586cabf0207c4a0862c4"}
{"level":"info","ts":"2026-07-29T03:23:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d6dee696a8a4f2d95ab0b7531cbf3e53923d6e49026b20995d3f0a735bcdb9a9"}
{"level":"info","ts":"2026-07-29T03:23:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/379c5d7ca541198d8d8a9f7f0f485a33d884b497516ec2714d7002ad92d108d8"}
{"level":"info","ts":"2026-07-29T03:23:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25d2ddf74e15f591b7b6b2def56ac47db0b8d1674fffe8f3c9d7f3569e8ac1a5"}
{"level":"info","ts":"2026-07-29T03:23:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0670cd8a20ac8055daa153ae07ab299462442d10339b0201e9e870f6dc9923e7"}
{"level":"info","ts":"2026-07-29T03:23:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf"}
{"level":"info","ts":"2026-07-29T03:23:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84932bc3f72c7f76bf92b7959fe186fcfccfe71e2f9d6d497032063524d3a6d2"}
{"level":"info","ts":"2026-07-29T03:23:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ac3dc357beabc1151795de445cbdd8455a0226bd33d7a983ceaed735652dfd97"}
{"level":"info","ts":"2026-07-29T03:23:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb"}
{"level":"info","ts":"2026-07-29T03:23:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/56e7ab09ff26ed11c2f84848d6ae0a0d35ddecbbf19f93dfaf5e3037164e9c57"}
{"level":"info","ts":"2026-07-29T03:23:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b9b0a2193341fc70c7b608f24c8eb7f7404c31fd994955b5c23cb442f890a152"}
{"level":"info","ts":"2026-07-29T03:23:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e22f57bd55fb2f20ff57f27675700dfaf62e0c49f40fb33608f9499e744bea1a"}
{"level":"info","ts":"2026-07-29T03:23:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/610501e18ee9fc08c64aa226b82fa9caf12c634d84e2685b0f8ef40b4067230a"}
{"level":"info","ts":"2026-07-29T03:23:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5549eeb02ba188c30c27058279703cf0d1237615ea2b44c37a94a07c6d1fd0a8"}
{"level":"info","ts":"2026-07-29T03:23:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/40c3b91699b4868f833757d279f13431c84290f9cb4a3e88d2d7839ce2c49187"}
{"level":"info","ts":"2026-07-29T03:23:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c3d84b14a3fe8f17ddb43f0888533278e54deea622a6d8d55afd8203646b7655"}
{"level":"info","ts":"2026-07-29T03:23:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc864e45ae1aa51dcc97ead2b76c25dc0bc413a02e0953ca40962805baabea0c"}
{"level":"info","ts":"2026-07-29T03:23:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55d0919c076c3f694277a85e07ffc23207e12e0f13ae3dcf9ef62a1b330b9884"}
{"level":"info","ts":"2026-07-29T03:23:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef954864eee7c5b88b328af99eb02d1487e68c2fc74f2a39bb1a94e31a139e39"}
{"level":"info","ts":"2026-07-29T03:23:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3"}
{"level":"debug","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11607d87d9c6661755fa895f71c8951bcf4b08ecc1bff600fa5b9fb3d8aa78bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:24:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:24:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11607d87d9c6661755fa895f71c8951bcf4b08ecc1bff600fa5b9fb3d8aa78bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11607d87d9c6661755fa895f71c8951bcf4b08ecc1bff600fa5b9fb3d8aa78bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11607d87d9c6661755fa895f71c8951bcf4b08ecc1bff600fa5b9fb3d8aa78bb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11607d87d9c6661755fa895f71c8951bcf4b08ecc1bff600fa5b9fb3d8aa78bb"}
{"level":"debug","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11607d87d9c6661755fa895f71c8951bcf4b08ecc1bff600fa5b9fb3d8aa78bb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11607d87d9c6661755fa895f71c8951bcf4b08ecc1bff600fa5b9fb3d8aa78bb"}
{"level":"debug","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11607d87d9c6661755fa895f71c8951bcf4b08ecc1bff600fa5b9fb3d8aa78bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:24:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:24:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11607d87d9c6661755fa895f71c8951bcf4b08ecc1bff600fa5b9fb3d8aa78bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11607d87d9c6661755fa895f71c8951bcf4b08ecc1bff600fa5b9fb3d8aa78bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90710843952f46e46d74e23e759cd691ffcb8dfb35f6acc91e5d19d7ec016ac1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:24:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:24:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90710843952f46e46d74e23e759cd691ffcb8dfb35f6acc91e5d19d7ec016ac1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11607d87d9c6661755fa895f71c8951bcf4b08ecc1bff600fa5b9fb3d8aa78bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90710843952f46e46d74e23e759cd691ffcb8dfb35f6acc91e5d19d7ec016ac1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90710843952f46e46d74e23e759cd691ffcb8dfb35f6acc91e5d19d7ec016ac1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90710843952f46e46d74e23e759cd691ffcb8dfb35f6acc91e5d19d7ec016ac1"}
{"level":"debug","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90710843952f46e46d74e23e759cd691ffcb8dfb35f6acc91e5d19d7ec016ac1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:24:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:24:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90710843952f46e46d74e23e759cd691ffcb8dfb35f6acc91e5d19d7ec016ac1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11607d87d9c6661755fa895f71c8951bcf4b08ecc1bff600fa5b9fb3d8aa78bb"}
{"level":"info","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90710843952f46e46d74e23e759cd691ffcb8dfb35f6acc91e5d19d7ec016ac1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90710843952f46e46d74e23e759cd691ffcb8dfb35f6acc91e5d19d7ec016ac1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:24:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:24:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90710843952f46e46d74e23e759cd691ffcb8dfb35f6acc91e5d19d7ec016ac1"}
{"level":"info","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90710843952f46e46d74e23e759cd691ffcb8dfb35f6acc91e5d19d7ec016ac1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90710843952f46e46d74e23e759cd691ffcb8dfb35f6acc91e5d19d7ec016ac1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90710843952f46e46d74e23e759cd691ffcb8dfb35f6acc91e5d19d7ec016ac1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90710843952f46e46d74e23e759cd691ffcb8dfb35f6acc91e5d19d7ec016ac1"}
{"level":"debug","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:24:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:24:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90710843952f46e46d74e23e759cd691ffcb8dfb35f6acc91e5d19d7ec016ac1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90710843952f46e46d74e23e759cd691ffcb8dfb35f6acc91e5d19d7ec016ac1"}
{"level":"debug","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:24:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:24:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf"}
{"level":"debug","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90710843952f46e46d74e23e759cd691ffcb8dfb35f6acc91e5d19d7ec016ac1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:24:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:24:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90710843952f46e46d74e23e759cd691ffcb8dfb35f6acc91e5d19d7ec016ac1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf"}
{"level":"info","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90710843952f46e46d74e23e759cd691ffcb8dfb35f6acc91e5d19d7ec016ac1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90710843952f46e46d74e23e759cd691ffcb8dfb35f6acc91e5d19d7ec016ac1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:24:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:24:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90710843952f46e46d74e23e759cd691ffcb8dfb35f6acc91e5d19d7ec016ac1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90710843952f46e46d74e23e759cd691ffcb8dfb35f6acc91e5d19d7ec016ac1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90710843952f46e46d74e23e759cd691ffcb8dfb35f6acc91e5d19d7ec016ac1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90710843952f46e46d74e23e759cd691ffcb8dfb35f6acc91e5d19d7ec016ac1"}
{"level":"debug","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90710843952f46e46d74e23e759cd691ffcb8dfb35f6acc91e5d19d7ec016ac1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90710843952f46e46d74e23e759cd691ffcb8dfb35f6acc91e5d19d7ec016ac1"}
{"level":"debug","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:24:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:24:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90710843952f46e46d74e23e759cd691ffcb8dfb35f6acc91e5d19d7ec016ac1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:24:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:24:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90710843952f46e46d74e23e759cd691ffcb8dfb35f6acc91e5d19d7ec016ac1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90710843952f46e46d74e23e759cd691ffcb8dfb35f6acc91e5d19d7ec016ac1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:24:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:24:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf"}
{"level":"info","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90710843952f46e46d74e23e759cd691ffcb8dfb35f6acc91e5d19d7ec016ac1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:24:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:24:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90710843952f46e46d74e23e759cd691ffcb8dfb35f6acc91e5d19d7ec016ac1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:24:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:24:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90710843952f46e46d74e23e759cd691ffcb8dfb35f6acc91e5d19d7ec016ac1"}
{"level":"info","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90710843952f46e46d74e23e759cd691ffcb8dfb35f6acc91e5d19d7ec016ac1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:24:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:24:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90710843952f46e46d74e23e759cd691ffcb8dfb35f6acc91e5d19d7ec016ac1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90710843952f46e46d74e23e759cd691ffcb8dfb35f6acc91e5d19d7ec016ac1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:24:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:24:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf"}
{"level":"info","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eee13f980e3ad9c435183fa00cc8b0c610253522c34629552db27cb7092e78cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:24:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:24:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90710843952f46e46d74e23e759cd691ffcb8dfb35f6acc91e5d19d7ec016ac1"}
{"level":"info","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eee13f980e3ad9c435183fa00cc8b0c610253522c34629552db27cb7092e78cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90710843952f46e46d74e23e759cd691ffcb8dfb35f6acc91e5d19d7ec016ac1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:24:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:24:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eee13f980e3ad9c435183fa00cc8b0c610253522c34629552db27cb7092e78cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:24:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:24:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eee13f980e3ad9c435183fa00cc8b0c610253522c34629552db27cb7092e78cf"}
{"level":"info","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eee13f980e3ad9c435183fa00cc8b0c610253522c34629552db27cb7092e78cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:24:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:24:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf"}
{"level":"info","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eee13f980e3ad9c435183fa00cc8b0c610253522c34629552db27cb7092e78cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:24:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:24:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:24:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:24:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eee13f980e3ad9c435183fa00cc8b0c610253522c34629552db27cb7092e78cf"}
{"level":"error","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eee13f980e3ad9c435183fa00cc8b0c610253522c34629552db27cb7092e78cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:24:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:24:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eee13f980e3ad9c435183fa00cc8b0c610253522c34629552db27cb7092e78cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eee13f980e3ad9c435183fa00cc8b0c610253522c34629552db27cb7092e78cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:24:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:24:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf"}
{"level":"info","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eee13f980e3ad9c435183fa00cc8b0c610253522c34629552db27cb7092e78cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:24:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:24:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eee13f980e3ad9c435183fa00cc8b0c610253522c34629552db27cb7092e78cf"}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eee13f980e3ad9c435183fa00cc8b0c610253522c34629552db27cb7092e78cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eee13f980e3ad9c435183fa00cc8b0c610253522c34629552db27cb7092e78cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eee13f980e3ad9c435183fa00cc8b0c610253522c34629552db27cb7092e78cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eee13f980e3ad9c435183fa00cc8b0c610253522c34629552db27cb7092e78cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eee13f980e3ad9c435183fa00cc8b0c610253522c34629552db27cb7092e78cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eee13f980e3ad9c435183fa00cc8b0c610253522c34629552db27cb7092e78cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf"}
{"level":"error","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"eee13f980e3ad9c435183fa00cc8b0c610253522c34629552db27cb7092e78cf","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"eee13f980e3ad9c435183fa00cc8b0c610253522c34629552db27cb7092e78cf\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eee13f980e3ad9c435183fa00cc8b0c610253522c34629552db27cb7092e78cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eee13f980e3ad9c435183fa00cc8b0c610253522c34629552db27cb7092e78cf"}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eee13f980e3ad9c435183fa00cc8b0c610253522c34629552db27cb7092e78cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eee13f980e3ad9c435183fa00cc8b0c610253522c34629552db27cb7092e78cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eee13f980e3ad9c435183fa00cc8b0c610253522c34629552db27cb7092e78cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf"}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eee13f980e3ad9c435183fa00cc8b0c610253522c34629552db27cb7092e78cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eee13f980e3ad9c435183fa00cc8b0c610253522c34629552db27cb7092e78cf"}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba9e82d0601bac09e106d78c60470ab0465fe6264a8f5db00e4ba42a57db29f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba9e82d0601bac09e106d78c60470ab0465fe6264a8f5db00e4ba42a57db29f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eee13f980e3ad9c435183fa00cc8b0c610253522c34629552db27cb7092e78cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf"}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba9e82d0601bac09e106d78c60470ab0465fe6264a8f5db00e4ba42a57db29f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba9e82d0601bac09e106d78c60470ab0465fe6264a8f5db00e4ba42a57db29f7"}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba9e82d0601bac09e106d78c60470ab0465fe6264a8f5db00e4ba42a57db29f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba9e82d0601bac09e106d78c60470ab0465fe6264a8f5db00e4ba42a57db29f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba9e82d0601bac09e106d78c60470ab0465fe6264a8f5db00e4ba42a57db29f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eee13f980e3ad9c435183fa00cc8b0c610253522c34629552db27cb7092e78cf"}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba9e82d0601bac09e106d78c60470ab0465fe6264a8f5db00e4ba42a57db29f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba9e82d0601bac09e106d78c60470ab0465fe6264a8f5db00e4ba42a57db29f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf"}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba9e82d0601bac09e106d78c60470ab0465fe6264a8f5db00e4ba42a57db29f7"}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf"}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf"}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f68442a6056841c60dc8e72e85fbd53a117239d0b001b8d05424333b406d6b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f68442a6056841c60dc8e72e85fbd53a117239d0b001b8d05424333b406d6b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f68442a6056841c60dc8e72e85fbd53a117239d0b001b8d05424333b406d6b2"}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f68442a6056841c60dc8e72e85fbd53a117239d0b001b8d05424333b406d6b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f68442a6056841c60dc8e72e85fbd53a117239d0b001b8d05424333b406d6b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f68442a6056841c60dc8e72e85fbd53a117239d0b001b8d05424333b406d6b2"}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f68442a6056841c60dc8e72e85fbd53a117239d0b001b8d05424333b406d6b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f68442a6056841c60dc8e72e85fbd53a117239d0b001b8d05424333b406d6b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f68442a6056841c60dc8e72e85fbd53a117239d0b001b8d05424333b406d6b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f68442a6056841c60dc8e72e85fbd53a117239d0b001b8d05424333b406d6b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf"}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f68442a6056841c60dc8e72e85fbd53a117239d0b001b8d05424333b406d6b2"}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6e564c986f2adaf3dd0ad9f654c5f98b65ac6fad3330e594a96b094216e8228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6e564c986f2adaf3dd0ad9f654c5f98b65ac6fad3330e594a96b094216e8228","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6e564c986f2adaf3dd0ad9f654c5f98b65ac6fad3330e594a96b094216e8228"}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6e564c986f2adaf3dd0ad9f654c5f98b65ac6fad3330e594a96b094216e8228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6e564c986f2adaf3dd0ad9f654c5f98b65ac6fad3330e594a96b094216e8228"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20"}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6e564c986f2adaf3dd0ad9f654c5f98b65ac6fad3330e594a96b094216e8228","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6e564c986f2adaf3dd0ad9f654c5f98b65ac6fad3330e594a96b094216e8228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6e564c986f2adaf3dd0ad9f654c5f98b65ac6fad3330e594a96b094216e8228"}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6e564c986f2adaf3dd0ad9f654c5f98b65ac6fad3330e594a96b094216e8228","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20"}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6e564c986f2adaf3dd0ad9f654c5f98b65ac6fad3330e594a96b094216e8228","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6e564c986f2adaf3dd0ad9f654c5f98b65ac6fad3330e594a96b094216e8228","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6e564c986f2adaf3dd0ad9f654c5f98b65ac6fad3330e594a96b094216e8228"}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6e564c986f2adaf3dd0ad9f654c5f98b65ac6fad3330e594a96b094216e8228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6e564c986f2adaf3dd0ad9f654c5f98b65ac6fad3330e594a96b094216e8228"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20"}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6e564c986f2adaf3dd0ad9f654c5f98b65ac6fad3330e594a96b094216e8228","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6e564c986f2adaf3dd0ad9f654c5f98b65ac6fad3330e594a96b094216e8228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6e564c986f2adaf3dd0ad9f654c5f98b65ac6fad3330e594a96b094216e8228","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6e564c986f2adaf3dd0ad9f654c5f98b65ac6fad3330e594a96b094216e8228","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6e564c986f2adaf3dd0ad9f654c5f98b65ac6fad3330e594a96b094216e8228","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6e564c986f2adaf3dd0ad9f654c5f98b65ac6fad3330e594a96b094216e8228"}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6e564c986f2adaf3dd0ad9f654c5f98b65ac6fad3330e594a96b094216e8228","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6e564c986f2adaf3dd0ad9f654c5f98b65ac6fad3330e594a96b094216e8228"}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"891a529cb9d13bd5bc469f524354e160b30281095530282054f538b6bfb3134e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"891a529cb9d13bd5bc469f524354e160b30281095530282054f538b6bfb3134e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"891a529cb9d13bd5bc469f524354e160b30281095530282054f538b6bfb3134e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/891a529cb9d13bd5bc469f524354e160b30281095530282054f538b6bfb3134e"}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"891a529cb9d13bd5bc469f524354e160b30281095530282054f538b6bfb3134e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6e564c986f2adaf3dd0ad9f654c5f98b65ac6fad3330e594a96b094216e8228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6e564c986f2adaf3dd0ad9f654c5f98b65ac6fad3330e594a96b094216e8228"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6e564c986f2adaf3dd0ad9f654c5f98b65ac6fad3330e594a96b094216e8228","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"891a529cb9d13bd5bc469f524354e160b30281095530282054f538b6bfb3134e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6e564c986f2adaf3dd0ad9f654c5f98b65ac6fad3330e594a96b094216e8228","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/891a529cb9d13bd5bc469f524354e160b30281095530282054f538b6bfb3134e"}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"891a529cb9d13bd5bc469f524354e160b30281095530282054f538b6bfb3134e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["891a529cb9d13bd5bc469f524354e160b30281095530282054f538b6bfb3134e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6e564c986f2adaf3dd0ad9f654c5f98b65ac6fad3330e594a96b094216e8228"}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"891a529cb9d13bd5bc469f524354e160b30281095530282054f538b6bfb3134e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"891a529cb9d13bd5bc469f524354e160b30281095530282054f538b6bfb3134e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/891a529cb9d13bd5bc469f524354e160b30281095530282054f538b6bfb3134e"}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/891a529cb9d13bd5bc469f524354e160b30281095530282054f538b6bfb3134e"}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"891a529cb9d13bd5bc469f524354e160b30281095530282054f538b6bfb3134e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef954864eee7c5b88b328af99eb02d1487e68c2fc74f2a39bb1a94e31a139e39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef954864eee7c5b88b328af99eb02d1487e68c2fc74f2a39bb1a94e31a139e39"}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/891a529cb9d13bd5bc469f524354e160b30281095530282054f538b6bfb3134e"}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef954864eee7c5b88b328af99eb02d1487e68c2fc74f2a39bb1a94e31a139e39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"891a529cb9d13bd5bc469f524354e160b30281095530282054f538b6bfb3134e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["891a529cb9d13bd5bc469f524354e160b30281095530282054f538b6bfb3134e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25d2ddf74e15f591b7b6b2def56ac47db0b8d1674fffe8f3c9d7f3569e8ac1a5"}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef954864eee7c5b88b328af99eb02d1487e68c2fc74f2a39bb1a94e31a139e39"}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"891a529cb9d13bd5bc469f524354e160b30281095530282054f538b6bfb3134e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25d2ddf74e15f591b7b6b2def56ac47db0b8d1674fffe8f3c9d7f3569e8ac1a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:24:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25d2ddf74e15f591b7b6b2def56ac47db0b8d1674fffe8f3c9d7f3569e8ac1a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca8ddb1952613363378b1dc8345aba2603d6dfd543b791e875cfa4d523b2de82"}
{"level":"info","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/891a529cb9d13bd5bc469f524354e160b30281095530282054f538b6bfb3134e"}
{"level":"info","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25d2ddf74e15f591b7b6b2def56ac47db0b8d1674fffe8f3c9d7f3569e8ac1a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef954864eee7c5b88b328af99eb02d1487e68c2fc74f2a39bb1a94e31a139e39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:24:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:24:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef954864eee7c5b88b328af99eb02d1487e68c2fc74f2a39bb1a94e31a139e39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28203cc8d45c4962e6f9c9ae5102d404f7a5fda56cc4514479f979fd9f8d161d"}
{"level":"info","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25d2ddf74e15f591b7b6b2def56ac47db0b8d1674fffe8f3c9d7f3569e8ac1a5"}
{"level":"info","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef954864eee7c5b88b328af99eb02d1487e68c2fc74f2a39bb1a94e31a139e39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca8ddb1952613363378b1dc8345aba2603d6dfd543b791e875cfa4d523b2de82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:24:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:24:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca8ddb1952613363378b1dc8345aba2603d6dfd543b791e875cfa4d523b2de82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf"}
{"level":"info","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef954864eee7c5b88b328af99eb02d1487e68c2fc74f2a39bb1a94e31a139e39"}
{"level":"info","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca8ddb1952613363378b1dc8345aba2603d6dfd543b791e875cfa4d523b2de82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"891a529cb9d13bd5bc469f524354e160b30281095530282054f538b6bfb3134e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28203cc8d45c4962e6f9c9ae5102d404f7a5fda56cc4514479f979fd9f8d161d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:24:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:24:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28203cc8d45c4962e6f9c9ae5102d404f7a5fda56cc4514479f979fd9f8d161d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca8ddb1952613363378b1dc8345aba2603d6dfd543b791e875cfa4d523b2de82"}
{"level":"info","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28203cc8d45c4962e6f9c9ae5102d404f7a5fda56cc4514479f979fd9f8d161d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25d2ddf74e15f591b7b6b2def56ac47db0b8d1674fffe8f3c9d7f3569e8ac1a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:24:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:24:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd9716abeba706efdc84dcc4bbc85a89ab3e24e41aa15cd87ec66228a329fce0"}
{"level":"info","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28203cc8d45c4962e6f9c9ae5102d404f7a5fda56cc4514479f979fd9f8d161d"}
{"level":"info","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3"}
{"level":"info","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef954864eee7c5b88b328af99eb02d1487e68c2fc74f2a39bb1a94e31a139e39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca8ddb1952613363378b1dc8345aba2603d6dfd543b791e875cfa4d523b2de82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd9716abeba706efdc84dcc4bbc85a89ab3e24e41aa15cd87ec66228a329fce0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:24:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:24:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd9716abeba706efdc84dcc4bbc85a89ab3e24e41aa15cd87ec66228a329fce0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f5576c7be636374bb12c3d3b7dfa886153923f6c9a66d9ec3a3c24f7773072d"}
{"level":"info","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb"}
{"level":"info","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd9716abeba706efdc84dcc4bbc85a89ab3e24e41aa15cd87ec66228a329fce0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28203cc8d45c4962e6f9c9ae5102d404f7a5fda56cc4514479f979fd9f8d161d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:24:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:24:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e305825257a9aeec92fc6129225af84f6701ba427e4ae55d8857946976a6660"}
{"level":"info","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf"}
{"level":"info","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/016dd25deae803fbda84ce7ed0c77b51516c2e7386c8c6a88d2e32b14f308afb"}
{"level":"info","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f5576c7be636374bb12c3d3b7dfa886153923f6c9a66d9ec3a3c24f7773072d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:24:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:24:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f5576c7be636374bb12c3d3b7dfa886153923f6c9a66d9ec3a3c24f7773072d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd9716abeba706efdc84dcc4bbc85a89ab3e24e41aa15cd87ec66228a329fce0"}
{"level":"info","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f5576c7be636374bb12c3d3b7dfa886153923f6c9a66d9ec3a3c24f7773072d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:24:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:24:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/723a98e75537fa8cb94fc1f4997a3d6c1187f933ad5ff47bac08bb8f36f98c7c"}
{"level":"info","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e305825257a9aeec92fc6129225af84f6701ba427e4ae55d8857946976a6660","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:24:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:24:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e305825257a9aeec92fc6129225af84f6701ba427e4ae55d8857946976a6660"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc864e45ae1aa51dcc97ead2b76c25dc0bc413a02e0953ca40962805baabea0c"}
{"level":"info","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/610501e18ee9fc08c64aa226b82fa9caf12c634d84e2685b0f8ef40b4067230a"}
{"level":"info","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e305825257a9aeec92fc6129225af84f6701ba427e4ae55d8857946976a6660","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"016dd25deae803fbda84ce7ed0c77b51516c2e7386c8c6a88d2e32b14f308afb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:24:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:24:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["016dd25deae803fbda84ce7ed0c77b51516c2e7386c8c6a88d2e32b14f308afb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3"}
{"level":"info","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbad1d27e5ff20dc86f3968c379c8253dcb38ed06de72774ed4200e01c98b35f"}
{"level":"info","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f5576c7be636374bb12c3d3b7dfa886153923f6c9a66d9ec3a3c24f7773072d"}
{"level":"info","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"016dd25deae803fbda84ce7ed0c77b51516c2e7386c8c6a88d2e32b14f308afb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd9716abeba706efdc84dcc4bbc85a89ab3e24e41aa15cd87ec66228a329fce0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"723a98e75537fa8cb94fc1f4997a3d6c1187f933ad5ff47bac08bb8f36f98c7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:24:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:24:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["723a98e75537fa8cb94fc1f4997a3d6c1187f933ad5ff47bac08bb8f36f98c7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb"}
{"level":"info","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e305825257a9aeec92fc6129225af84f6701ba427e4ae55d8857946976a6660"}
{"level":"info","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"723a98e75537fa8cb94fc1f4997a3d6c1187f933ad5ff47bac08bb8f36f98c7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc864e45ae1aa51dcc97ead2b76c25dc0bc413a02e0953ca40962805baabea0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:24:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:24:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc864e45ae1aa51dcc97ead2b76c25dc0bc413a02e0953ca40962805baabea0c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/016dd25deae803fbda84ce7ed0c77b51516c2e7386c8c6a88d2e32b14f308afb"}
{"level":"info","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/723a98e75537fa8cb94fc1f4997a3d6c1187f933ad5ff47bac08bb8f36f98c7c"}
{"level":"info","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc864e45ae1aa51dcc97ead2b76c25dc0bc413a02e0953ca40962805baabea0c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"610501e18ee9fc08c64aa226b82fa9caf12c634d84e2685b0f8ef40b4067230a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:24:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:24:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["610501e18ee9fc08c64aa226b82fa9caf12c634d84e2685b0f8ef40b4067230a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc864e45ae1aa51dcc97ead2b76c25dc0bc413a02e0953ca40962805baabea0c"}
{"level":"info","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"610501e18ee9fc08c64aa226b82fa9caf12c634d84e2685b0f8ef40b4067230a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbad1d27e5ff20dc86f3968c379c8253dcb38ed06de72774ed4200e01c98b35f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:24:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:24:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbad1d27e5ff20dc86f3968c379c8253dcb38ed06de72774ed4200e01c98b35f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/610501e18ee9fc08c64aa226b82fa9caf12c634d84e2685b0f8ef40b4067230a"}
{"level":"info","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbad1d27e5ff20dc86f3968c379c8253dcb38ed06de72774ed4200e01c98b35f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f5576c7be636374bb12c3d3b7dfa886153923f6c9a66d9ec3a3c24f7773072d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e305825257a9aeec92fc6129225af84f6701ba427e4ae55d8857946976a6660","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"016dd25deae803fbda84ce7ed0c77b51516c2e7386c8c6a88d2e32b14f308afb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"723a98e75537fa8cb94fc1f4997a3d6c1187f933ad5ff47bac08bb8f36f98c7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc864e45ae1aa51dcc97ead2b76c25dc0bc413a02e0953ca40962805baabea0c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"610501e18ee9fc08c64aa226b82fa9caf12c634d84e2685b0f8ef40b4067230a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbad1d27e5ff20dc86f3968c379c8253dcb38ed06de72774ed4200e01c98b35f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:24:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:24:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbad1d27e5ff20dc86f3968c379c8253dcb38ed06de72774ed4200e01c98b35f"}
{"level":"info","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbad1d27e5ff20dc86f3968c379c8253dcb38ed06de72774ed4200e01c98b35f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbad1d27e5ff20dc86f3968c379c8253dcb38ed06de72774ed4200e01c98b35f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbad1d27e5ff20dc86f3968c379c8253dcb38ed06de72774ed4200e01c98b35f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbad1d27e5ff20dc86f3968c379c8253dcb38ed06de72774ed4200e01c98b35f"}
{"level":"debug","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbad1d27e5ff20dc86f3968c379c8253dcb38ed06de72774ed4200e01c98b35f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:24:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:24:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbad1d27e5ff20dc86f3968c379c8253dcb38ed06de72774ed4200e01c98b35f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbad1d27e5ff20dc86f3968c379c8253dcb38ed06de72774ed4200e01c98b35f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbad1d27e5ff20dc86f3968c379c8253dcb38ed06de72774ed4200e01c98b35f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbad1d27e5ff20dc86f3968c379c8253dcb38ed06de72774ed4200e01c98b35f"}
{"level":"info","ts":"2026-07-29T03:25:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a3a2e73f-b4b4-429d-83e2-c4e178463934","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:35874","PortSpecifier":{"PortValue":35874}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a3a2e73f-b4b4-429d-83e2-c4e178463934","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T03:25:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a3a2e73f-b4b4-429d-83e2-c4e178463934","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:35874","PortSpecifier":{"PortValue":35874}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785295515,"nanos":52779188},"http":{"id":"a3a2e73f-b4b4-429d-83e2-c4e178463934","method":"POST","headers":{":authority":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:25:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a3a2e73f-b4b4-429d-83e2-c4e178463934","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T03:25:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a3a2e73f-b4b4-429d-83e2-c4e178463934","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1618919a-3ba0-4198-a1c1-cb1ddccaf188","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f8a80838-796d-4745-8e65-dede54c057eb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e8a4b9e0ac87"]}}
{"level":"debug","ts":"2026-07-29T03:25:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a3a2e73f-b4b4-429d-83e2-c4e178463934","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e8a4b9e0ac87"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f8a80838-796d-4745-8e65-dede54c057eb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1618919a-3ba0-4198-a1c1-cb1ddccaf188","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bc864e45ae1aa51dcc97ead2b76c25dc0bc413a02e0953ca40962805baabea0c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:25:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3a2e73f-b4b4-429d-83e2-c4e178463934","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3a2e73f-b4b4-429d-83e2-c4e178463934","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3a2e73f-b4b4-429d-83e2-c4e178463934","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f4870d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a3a2e73f-b4b4-429d-83e2-c4e178463934","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T03:25:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a3a2e73f-b4b4-429d-83e2-c4e178463934","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T03:25:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a3a2e73f-b4b4-429d-83e2-c4e178463934","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-29T03:25:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a3a2e73f-b4b4-429d-83e2-c4e178463934","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T03:25:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a3a2e73f-b4b4-429d-83e2-c4e178463934","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T03:25:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e891e2ee-62b9-48c5-989a-6c3fe1325975","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:46454","PortSpecifier":{"PortValue":46454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e891e2ee-62b9-48c5-989a-6c3fe1325975","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-19184d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T03:25:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e891e2ee-62b9-48c5-989a-6c3fe1325975","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:46454","PortSpecifier":{"PortValue":46454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785295515,"nanos":100967540},"http":{"id":"e891e2ee-62b9-48c5-989a-6c3fe1325975","method":"POST","headers":{":authority":"e2e-shared-b-19184d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:25:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e891e2ee-62b9-48c5-989a-6c3fe1325975","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T03:25:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e891e2ee-62b9-48c5-989a-6c3fe1325975","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1618919a-3ba0-4198-a1c1-cb1ddccaf188","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f8a80838-796d-4745-8e65-dede54c057eb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e8a4b9e0ac87"]}}
{"level":"debug","ts":"2026-07-29T03:25:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e891e2ee-62b9-48c5-989a-6c3fe1325975","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e8a4b9e0ac87"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f8a80838-796d-4745-8e65-dede54c057eb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1618919a-3ba0-4198-a1c1-cb1ddccaf188","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-19184d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:25:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e891e2ee-62b9-48c5-989a-6c3fe1325975","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e891e2ee-62b9-48c5-989a-6c3fe1325975","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e891e2ee-62b9-48c5-989a-6c3fe1325975","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-19184d/rate-test-model-19184d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-19184d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e891e2ee-62b9-48c5-989a-6c3fe1325975","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T03:25:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e891e2ee-62b9-48c5-989a-6c3fe1325975","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T03:25:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e891e2ee-62b9-48c5-989a-6c3fe1325975","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-29T03:25:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e891e2ee-62b9-48c5-989a-6c3fe1325975","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T03:25:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e891e2ee-62b9-48c5-989a-6c3fe1325975","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T03:25:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4033629-9056-4a06-86c3-a6e17f7a8b5f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:35886","PortSpecifier":{"PortValue":35886}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a4033629-9056-4a06-86c3-a6e17f7a8b5f","method":"POST","path":"/ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d/v1/completions","host":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T03:25:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4033629-9056-4a06-86c3-a6e17f7a8b5f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:35886","PortSpecifier":{"PortValue":35886}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785295515,"nanos":146377503},"http":{"id":"a4033629-9056-4a06-86c3-a6e17f7a8b5f","method":"POST","headers":{":authority":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:25:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a4033629-9056-4a06-86c3-a6e17f7a8b5f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1HsWpbrXDAYKrcgRj_o8EjHawD1Z2pN3VJsDY8eJ9UqdFAgViJPSTYYpCzTFG"}
{"level":"debug","ts":"2026-07-29T03:25:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a4033629-9056-4a06-86c3-a6e17f7a8b5f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f4870d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1HsWpbrXDAYKrcgRj_o8EjHawD1Z2pN3VJsDY8eJ9UqdFAgViJPSTYYpCzTFG\"}"}
{"level":"debug","ts":"2026-07-29T03:25:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a4033629-9056-4a06-86c3-a6e17f7a8b5f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f4870d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7b45b2d8-e834-4a47-8e46-78d9fcea6646","keyName":"e2e-rate-a-0b7c3c","subscription":"e2e-rate-iso-a-0b7c3c","tenant":"e2e-shared-a-f4870d","userId":"7b45b2d8-e834-4a47-8e46-78d9fcea6646","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T03:25:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a4033629-9056-4a06-86c3-a6e17f7a8b5f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f4870d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d\",\"requestedSubscription\":\"e2e-rate-iso-a-0b7c3c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T03:25:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a4033629-9056-4a06-86c3-a6e17f7a8b5f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f4870d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-f4870d/models/facebook/opt-125m","name":"rate-test-model-f4870d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0b7c3c","namespace":"ai-tenant-e2e-shared-a-f4870d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d"}}
{"level":"debug","ts":"2026-07-29T03:25:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a4033629-9056-4a06-86c3-a6e17f7a8b5f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:25:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4033629-9056-4a06-86c3-a6e17f7a8b5f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4033629-9056-4a06-86c3-a6e17f7a8b5f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4033629-9056-4a06-86c3-a6e17f7a8b5f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f4870d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4033629-9056-4a06-86c3-a6e17f7a8b5f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4033629-9056-4a06-86c3-a6e17f7a8b5f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T03:25:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4033629-9056-4a06-86c3-a6e17f7a8b5f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T03:25:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4033629-9056-4a06-86c3-a6e17f7a8b5f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0b7c3c"}
{"level":"debug","ts":"2026-07-29T03:25:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4033629-9056-4a06-86c3-a6e17f7a8b5f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7b45b2d8-e834-4a47-8e46-78d9fcea6646","keyName":"e2e-rate-a-0b7c3c","selected_subscription":"e2e-rate-iso-a-0b7c3c","selected_subscription_key":"ai-tenant-e2e-shared-a-f4870d/e2e-rate-iso-a-0b7c3c@ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-f4870d/models/facebook/opt-125m","name":"rate-test-model-f4870d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0b7c3c","namespace":"ai-tenant-e2e-shared-a-f4870d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T03:25:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4033629-9056-4a06-86c3-a6e17f7a8b5f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T03:25:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4033629-9056-4a06-86c3-a6e17f7a8b5f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T03:25:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c148b1e8-a6f1-4736-9081-bda9fb67860d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:35888","PortSpecifier":{"PortValue":35888}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c148b1e8-a6f1-4736-9081-bda9fb67860d","method":"POST","path":"/ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d/v1/completions","host":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T03:25:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c148b1e8-a6f1-4736-9081-bda9fb67860d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:35888","PortSpecifier":{"PortValue":35888}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785295516,"nanos":234739303},"http":{"id":"c148b1e8-a6f1-4736-9081-bda9fb67860d","method":"POST","headers":{":authority":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:25:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c148b1e8-a6f1-4736-9081-bda9fb67860d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1HsWpbrXDAYKrcgRj_o8EjHawD1Z2pN3VJsDY8eJ9UqdFAgViJPSTYYpCzTFG"}
{"level":"debug","ts":"2026-07-29T03:25:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c148b1e8-a6f1-4736-9081-bda9fb67860d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f4870d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1HsWpbrXDAYKrcgRj_o8EjHawD1Z2pN3VJsDY8eJ9UqdFAgViJPSTYYpCzTFG\"}"}
{"level":"debug","ts":"2026-07-29T03:25:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c148b1e8-a6f1-4736-9081-bda9fb67860d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f4870d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7b45b2d8-e834-4a47-8e46-78d9fcea6646","keyName":"e2e-rate-a-0b7c3c","subscription":"e2e-rate-iso-a-0b7c3c","tenant":"e2e-shared-a-f4870d","userId":"7b45b2d8-e834-4a47-8e46-78d9fcea6646","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T03:25:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c148b1e8-a6f1-4736-9081-bda9fb67860d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f4870d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d\",\"requestedSubscription\":\"e2e-rate-iso-a-0b7c3c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T03:25:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c148b1e8-a6f1-4736-9081-bda9fb67860d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f4870d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-f4870d/models/facebook/opt-125m","name":"rate-test-model-f4870d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0b7c3c","namespace":"ai-tenant-e2e-shared-a-f4870d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d"}}
{"level":"debug","ts":"2026-07-29T03:25:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c148b1e8-a6f1-4736-9081-bda9fb67860d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:25:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c148b1e8-a6f1-4736-9081-bda9fb67860d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c148b1e8-a6f1-4736-9081-bda9fb67860d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c148b1e8-a6f1-4736-9081-bda9fb67860d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c148b1e8-a6f1-4736-9081-bda9fb67860d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f4870d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c148b1e8-a6f1-4736-9081-bda9fb67860d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0b7c3c"}
{"level":"debug","ts":"2026-07-29T03:25:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c148b1e8-a6f1-4736-9081-bda9fb67860d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T03:25:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c148b1e8-a6f1-4736-9081-bda9fb67860d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T03:25:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c148b1e8-a6f1-4736-9081-bda9fb67860d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7b45b2d8-e834-4a47-8e46-78d9fcea6646","keyName":"e2e-rate-a-0b7c3c","selected_subscription":"e2e-rate-iso-a-0b7c3c","selected_subscription_key":"ai-tenant-e2e-shared-a-f4870d/e2e-rate-iso-a-0b7c3c@ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-f4870d/models/facebook/opt-125m","name":"rate-test-model-f4870d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0b7c3c","namespace":"ai-tenant-e2e-shared-a-f4870d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T03:25:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c148b1e8-a6f1-4736-9081-bda9fb67860d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T03:25:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c148b1e8-a6f1-4736-9081-bda9fb67860d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T03:25:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5676682-e23d-4ffc-a16d-013b6936b837","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:35890","PortSpecifier":{"PortValue":35890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c5676682-e23d-4ffc-a16d-013b6936b837","method":"POST","path":"/ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d/v1/completions","host":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T03:25:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5676682-e23d-4ffc-a16d-013b6936b837","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:35890","PortSpecifier":{"PortValue":35890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785295517,"nanos":280214504},"http":{"id":"c5676682-e23d-4ffc-a16d-013b6936b837","method":"POST","headers":{":authority":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:25:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c5676682-e23d-4ffc-a16d-013b6936b837","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1HsWpbrXDAYKrcgRj_o8EjHawD1Z2pN3VJsDY8eJ9UqdFAgViJPSTYYpCzTFG"}
{"level":"debug","ts":"2026-07-29T03:25:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c5676682-e23d-4ffc-a16d-013b6936b837","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f4870d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1HsWpbrXDAYKrcgRj_o8EjHawD1Z2pN3VJsDY8eJ9UqdFAgViJPSTYYpCzTFG\"}"}
{"level":"debug","ts":"2026-07-29T03:25:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c5676682-e23d-4ffc-a16d-013b6936b837","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f4870d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7b45b2d8-e834-4a47-8e46-78d9fcea6646","keyName":"e2e-rate-a-0b7c3c","subscription":"e2e-rate-iso-a-0b7c3c","tenant":"e2e-shared-a-f4870d","userId":"7b45b2d8-e834-4a47-8e46-78d9fcea6646","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T03:25:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c5676682-e23d-4ffc-a16d-013b6936b837","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f4870d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d\",\"requestedSubscription\":\"e2e-rate-iso-a-0b7c3c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T03:25:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c5676682-e23d-4ffc-a16d-013b6936b837","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f4870d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-f4870d/models/facebook/opt-125m","name":"rate-test-model-f4870d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0b7c3c","namespace":"ai-tenant-e2e-shared-a-f4870d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d"}}
{"level":"debug","ts":"2026-07-29T03:25:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c5676682-e23d-4ffc-a16d-013b6936b837","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:25:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5676682-e23d-4ffc-a16d-013b6936b837","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5676682-e23d-4ffc-a16d-013b6936b837","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5676682-e23d-4ffc-a16d-013b6936b837","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5676682-e23d-4ffc-a16d-013b6936b837","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f4870d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5676682-e23d-4ffc-a16d-013b6936b837","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T03:25:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5676682-e23d-4ffc-a16d-013b6936b837","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0b7c3c"}
{"level":"debug","ts":"2026-07-29T03:25:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5676682-e23d-4ffc-a16d-013b6936b837","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T03:25:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5676682-e23d-4ffc-a16d-013b6936b837","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7b45b2d8-e834-4a47-8e46-78d9fcea6646","keyName":"e2e-rate-a-0b7c3c","selected_subscription":"e2e-rate-iso-a-0b7c3c","selected_subscription_key":"ai-tenant-e2e-shared-a-f4870d/e2e-rate-iso-a-0b7c3c@ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-f4870d/models/facebook/opt-125m","name":"rate-test-model-f4870d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0b7c3c","namespace":"ai-tenant-e2e-shared-a-f4870d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T03:25:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5676682-e23d-4ffc-a16d-013b6936b837","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T03:25:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5676682-e23d-4ffc-a16d-013b6936b837","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T03:25:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00383701-f6cd-4f8d-b3ce-9d12917d4130","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60854","PortSpecifier":{"PortValue":60854}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"00383701-f6cd-4f8d-b3ce-9d12917d4130","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T03:25:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00383701-f6cd-4f8d-b3ce-9d12917d4130","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60854","PortSpecifier":{"PortValue":60854}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785295536,"nanos":504270525},"http":{"id":"00383701-f6cd-4f8d-b3ce-9d12917d4130","method":"POST","headers":{":authority":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:25:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"00383701-f6cd-4f8d-b3ce-9d12917d4130","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T03:25:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"00383701-f6cd-4f8d-b3ce-9d12917d4130","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1618919a-3ba0-4198-a1c1-cb1ddccaf188","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f8a80838-796d-4745-8e65-dede54c057eb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e8a4b9e0ac87"]}}
{"level":"debug","ts":"2026-07-29T03:25:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"00383701-f6cd-4f8d-b3ce-9d12917d4130","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e8a4b9e0ac87"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f8a80838-796d-4745-8e65-dede54c057eb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1618919a-3ba0-4198-a1c1-cb1ddccaf188","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bc864e45ae1aa51dcc97ead2b76c25dc0bc413a02e0953ca40962805baabea0c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:25:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00383701-f6cd-4f8d-b3ce-9d12917d4130","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00383701-f6cd-4f8d-b3ce-9d12917d4130","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00383701-f6cd-4f8d-b3ce-9d12917d4130","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f4870d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"00383701-f6cd-4f8d-b3ce-9d12917d4130","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T03:25:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00383701-f6cd-4f8d-b3ce-9d12917d4130","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T03:25:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00383701-f6cd-4f8d-b3ce-9d12917d4130","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-29T03:25:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00383701-f6cd-4f8d-b3ce-9d12917d4130","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T03:25:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00383701-f6cd-4f8d-b3ce-9d12917d4130","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T03:25:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6606e46e-7ee2-477e-9083-3a0318cd89eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:53234","PortSpecifier":{"PortValue":53234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6606e46e-7ee2-477e-9083-3a0318cd89eb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-19184d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T03:25:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6606e46e-7ee2-477e-9083-3a0318cd89eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:53234","PortSpecifier":{"PortValue":53234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785295536,"nanos":549752236},"http":{"id":"6606e46e-7ee2-477e-9083-3a0318cd89eb","method":"POST","headers":{":authority":"e2e-shared-b-19184d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:25:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6606e46e-7ee2-477e-9083-3a0318cd89eb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T03:25:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6606e46e-7ee2-477e-9083-3a0318cd89eb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1618919a-3ba0-4198-a1c1-cb1ddccaf188","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f8a80838-796d-4745-8e65-dede54c057eb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e8a4b9e0ac87"]}}
{"level":"debug","ts":"2026-07-29T03:25:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6606e46e-7ee2-477e-9083-3a0318cd89eb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e8a4b9e0ac87"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f8a80838-796d-4745-8e65-dede54c057eb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1618919a-3ba0-4198-a1c1-cb1ddccaf188","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-19184d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:25:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6606e46e-7ee2-477e-9083-3a0318cd89eb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6606e46e-7ee2-477e-9083-3a0318cd89eb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6606e46e-7ee2-477e-9083-3a0318cd89eb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-19184d/rate-test-model-19184d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-19184d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6606e46e-7ee2-477e-9083-3a0318cd89eb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T03:25:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6606e46e-7ee2-477e-9083-3a0318cd89eb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T03:25:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6606e46e-7ee2-477e-9083-3a0318cd89eb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-29T03:25:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6606e46e-7ee2-477e-9083-3a0318cd89eb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T03:25:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6606e46e-7ee2-477e-9083-3a0318cd89eb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T03:25:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"91cf1fef-9b3c-465b-9bae-b555aa3334c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60868","PortSpecifier":{"PortValue":60868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"91cf1fef-9b3c-465b-9bae-b555aa3334c2","method":"POST","path":"/ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d/v1/completions","host":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T03:25:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"91cf1fef-9b3c-465b-9bae-b555aa3334c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60868","PortSpecifier":{"PortValue":60868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785295536,"nanos":583183559},"http":{"id":"91cf1fef-9b3c-465b-9bae-b555aa3334c2","method":"POST","headers":{":authority":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:25:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"91cf1fef-9b3c-465b-9bae-b555aa3334c2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1cujDQk9hBA0D1nl6_e8i5ka4USlRUvWdXuf1Epgce5QLISFa8k3szLB8kuwN"}
{"level":"debug","ts":"2026-07-29T03:25:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"91cf1fef-9b3c-465b-9bae-b555aa3334c2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f4870d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1cujDQk9hBA0D1nl6_e8i5ka4USlRUvWdXuf1Epgce5QLISFa8k3szLB8kuwN\"}"}
{"level":"debug","ts":"2026-07-29T03:25:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"91cf1fef-9b3c-465b-9bae-b555aa3334c2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f4870d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"df6406f0-b2f7-4435-b0a2-b87f07aa8428","keyName":"e2e-rate-a-811e44","subscription":"e2e-rate-iso-a-811e44","tenant":"e2e-shared-a-f4870d","userId":"df6406f0-b2f7-4435-b0a2-b87f07aa8428","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T03:25:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"91cf1fef-9b3c-465b-9bae-b555aa3334c2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f4870d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d\",\"requestedSubscription\":\"e2e-rate-iso-a-811e44\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T03:25:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"91cf1fef-9b3c-465b-9bae-b555aa3334c2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f4870d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-f4870d/models/facebook/opt-125m","name":"rate-test-model-f4870d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-811e44","namespace":"ai-tenant-e2e-shared-a-f4870d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d"}}
{"level":"debug","ts":"2026-07-29T03:25:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"91cf1fef-9b3c-465b-9bae-b555aa3334c2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:25:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91cf1fef-9b3c-465b-9bae-b555aa3334c2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91cf1fef-9b3c-465b-9bae-b555aa3334c2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91cf1fef-9b3c-465b-9bae-b555aa3334c2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f4870d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91cf1fef-9b3c-465b-9bae-b555aa3334c2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91cf1fef-9b3c-465b-9bae-b555aa3334c2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T03:25:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91cf1fef-9b3c-465b-9bae-b555aa3334c2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-811e44"}
{"level":"debug","ts":"2026-07-29T03:25:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91cf1fef-9b3c-465b-9bae-b555aa3334c2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T03:25:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91cf1fef-9b3c-465b-9bae-b555aa3334c2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"df6406f0-b2f7-4435-b0a2-b87f07aa8428","keyName":"e2e-rate-a-811e44","selected_subscription":"e2e-rate-iso-a-811e44","selected_subscription_key":"ai-tenant-e2e-shared-a-f4870d/e2e-rate-iso-a-811e44@ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-f4870d/models/facebook/opt-125m","name":"rate-test-model-f4870d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-811e44","namespace":"ai-tenant-e2e-shared-a-f4870d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T03:25:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"91cf1fef-9b3c-465b-9bae-b555aa3334c2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T03:25:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"91cf1fef-9b3c-465b-9bae-b555aa3334c2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T03:25:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"35d867f2-cba7-4b2e-bc6d-6e5e651e83ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60876","PortSpecifier":{"PortValue":60876}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"35d867f2-cba7-4b2e-bc6d-6e5e651e83ab","method":"POST","path":"/ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d/v1/completions","host":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T03:25:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"35d867f2-cba7-4b2e-bc6d-6e5e651e83ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60876","PortSpecifier":{"PortValue":60876}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785295537,"nanos":619097051},"http":{"id":"35d867f2-cba7-4b2e-bc6d-6e5e651e83ab","method":"POST","headers":{":authority":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:25:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"35d867f2-cba7-4b2e-bc6d-6e5e651e83ab","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1cujDQk9hBA0D1nl6_e8i5ka4USlRUvWdXuf1Epgce5QLISFa8k3szLB8kuwN"}
{"level":"debug","ts":"2026-07-29T03:25:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"35d867f2-cba7-4b2e-bc6d-6e5e651e83ab","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f4870d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1cujDQk9hBA0D1nl6_e8i5ka4USlRUvWdXuf1Epgce5QLISFa8k3szLB8kuwN\"}"}
{"level":"debug","ts":"2026-07-29T03:25:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"35d867f2-cba7-4b2e-bc6d-6e5e651e83ab","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f4870d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"df6406f0-b2f7-4435-b0a2-b87f07aa8428","keyName":"e2e-rate-a-811e44","subscription":"e2e-rate-iso-a-811e44","tenant":"e2e-shared-a-f4870d","userId":"df6406f0-b2f7-4435-b0a2-b87f07aa8428","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T03:25:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"35d867f2-cba7-4b2e-bc6d-6e5e651e83ab","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f4870d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d\",\"requestedSubscription\":\"e2e-rate-iso-a-811e44\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T03:25:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"35d867f2-cba7-4b2e-bc6d-6e5e651e83ab","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f4870d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-f4870d/models/facebook/opt-125m","name":"rate-test-model-f4870d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-811e44","namespace":"ai-tenant-e2e-shared-a-f4870d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d"}}
{"level":"debug","ts":"2026-07-29T03:25:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"35d867f2-cba7-4b2e-bc6d-6e5e651e83ab","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:25:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35d867f2-cba7-4b2e-bc6d-6e5e651e83ab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35d867f2-cba7-4b2e-bc6d-6e5e651e83ab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35d867f2-cba7-4b2e-bc6d-6e5e651e83ab","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35d867f2-cba7-4b2e-bc6d-6e5e651e83ab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f4870d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35d867f2-cba7-4b2e-bc6d-6e5e651e83ab","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T03:25:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35d867f2-cba7-4b2e-bc6d-6e5e651e83ab","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T03:25:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35d867f2-cba7-4b2e-bc6d-6e5e651e83ab","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-811e44"}
{"level":"debug","ts":"2026-07-29T03:25:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35d867f2-cba7-4b2e-bc6d-6e5e651e83ab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"df6406f0-b2f7-4435-b0a2-b87f07aa8428","keyName":"e2e-rate-a-811e44","selected_subscription":"e2e-rate-iso-a-811e44","selected_subscription_key":"ai-tenant-e2e-shared-a-f4870d/e2e-rate-iso-a-811e44@ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-f4870d/models/facebook/opt-125m","name":"rate-test-model-f4870d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-811e44","namespace":"ai-tenant-e2e-shared-a-f4870d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T03:25:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"35d867f2-cba7-4b2e-bc6d-6e5e651e83ab","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T03:25:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"35d867f2-cba7-4b2e-bc6d-6e5e651e83ab","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T03:25:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c153197a-f40c-47f3-9c3f-12a971e72095","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60888","PortSpecifier":{"PortValue":60888}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c153197a-f40c-47f3-9c3f-12a971e72095","method":"POST","path":"/ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d/v1/completions","host":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T03:25:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c153197a-f40c-47f3-9c3f-12a971e72095","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60888","PortSpecifier":{"PortValue":60888}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785295538,"nanos":656262680},"http":{"id":"c153197a-f40c-47f3-9c3f-12a971e72095","method":"POST","headers":{":authority":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:25:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c153197a-f40c-47f3-9c3f-12a971e72095","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1cujDQk9hBA0D1nl6_e8i5ka4USlRUvWdXuf1Epgce5QLISFa8k3szLB8kuwN"}
{"level":"debug","ts":"2026-07-29T03:25:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c153197a-f40c-47f3-9c3f-12a971e72095","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f4870d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1cujDQk9hBA0D1nl6_e8i5ka4USlRUvWdXuf1Epgce5QLISFa8k3szLB8kuwN\"}"}
{"level":"debug","ts":"2026-07-29T03:25:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c153197a-f40c-47f3-9c3f-12a971e72095","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f4870d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"df6406f0-b2f7-4435-b0a2-b87f07aa8428","keyName":"e2e-rate-a-811e44","subscription":"e2e-rate-iso-a-811e44","tenant":"e2e-shared-a-f4870d","userId":"df6406f0-b2f7-4435-b0a2-b87f07aa8428","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T03:25:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c153197a-f40c-47f3-9c3f-12a971e72095","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f4870d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d\",\"requestedSubscription\":\"e2e-rate-iso-a-811e44\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T03:25:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c153197a-f40c-47f3-9c3f-12a971e72095","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f4870d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-f4870d/models/facebook/opt-125m","name":"rate-test-model-f4870d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-811e44","namespace":"ai-tenant-e2e-shared-a-f4870d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d"}}
{"level":"debug","ts":"2026-07-29T03:25:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c153197a-f40c-47f3-9c3f-12a971e72095","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:25:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c153197a-f40c-47f3-9c3f-12a971e72095","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c153197a-f40c-47f3-9c3f-12a971e72095","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c153197a-f40c-47f3-9c3f-12a971e72095","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f4870d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c153197a-f40c-47f3-9c3f-12a971e72095","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c153197a-f40c-47f3-9c3f-12a971e72095","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-811e44"}
{"level":"debug","ts":"2026-07-29T03:25:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c153197a-f40c-47f3-9c3f-12a971e72095","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T03:25:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c153197a-f40c-47f3-9c3f-12a971e72095","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T03:25:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c153197a-f40c-47f3-9c3f-12a971e72095","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"df6406f0-b2f7-4435-b0a2-b87f07aa8428","keyName":"e2e-rate-a-811e44","selected_subscription":"e2e-rate-iso-a-811e44","selected_subscription_key":"ai-tenant-e2e-shared-a-f4870d/e2e-rate-iso-a-811e44@ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-f4870d/models/facebook/opt-125m","name":"rate-test-model-f4870d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-811e44","namespace":"ai-tenant-e2e-shared-a-f4870d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T03:25:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c153197a-f40c-47f3-9c3f-12a971e72095","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T03:25:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c153197a-f40c-47f3-9c3f-12a971e72095","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T03:25:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0aa3bc69-214c-408b-bd69-42102eb31d4a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60904","PortSpecifier":{"PortValue":60904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0aa3bc69-214c-408b-bd69-42102eb31d4a","method":"POST","path":"/ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d/v1/completions","host":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T03:25:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0aa3bc69-214c-408b-bd69-42102eb31d4a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60904","PortSpecifier":{"PortValue":60904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785295539,"nanos":695740519},"http":{"id":"0aa3bc69-214c-408b-bd69-42102eb31d4a","method":"POST","headers":{":authority":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:25:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0aa3bc69-214c-408b-bd69-42102eb31d4a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1cujDQk9hBA0D1nl6_e8i5ka4USlRUvWdXuf1Epgce5QLISFa8k3szLB8kuwN"}
{"level":"debug","ts":"2026-07-29T03:25:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0aa3bc69-214c-408b-bd69-42102eb31d4a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f4870d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1cujDQk9hBA0D1nl6_e8i5ka4USlRUvWdXuf1Epgce5QLISFa8k3szLB8kuwN\"}"}
{"level":"debug","ts":"2026-07-29T03:25:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0aa3bc69-214c-408b-bd69-42102eb31d4a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f4870d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"df6406f0-b2f7-4435-b0a2-b87f07aa8428","keyName":"e2e-rate-a-811e44","subscription":"e2e-rate-iso-a-811e44","tenant":"e2e-shared-a-f4870d","userId":"df6406f0-b2f7-4435-b0a2-b87f07aa8428","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T03:25:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0aa3bc69-214c-408b-bd69-42102eb31d4a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f4870d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d\",\"requestedSubscription\":\"e2e-rate-iso-a-811e44\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T03:25:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0aa3bc69-214c-408b-bd69-42102eb31d4a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f4870d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-f4870d/models/facebook/opt-125m","name":"rate-test-model-f4870d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-811e44","namespace":"ai-tenant-e2e-shared-a-f4870d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d"}}
{"level":"debug","ts":"2026-07-29T03:25:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0aa3bc69-214c-408b-bd69-42102eb31d4a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:25:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0aa3bc69-214c-408b-bd69-42102eb31d4a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0aa3bc69-214c-408b-bd69-42102eb31d4a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0aa3bc69-214c-408b-bd69-42102eb31d4a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0aa3bc69-214c-408b-bd69-42102eb31d4a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f4870d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0aa3bc69-214c-408b-bd69-42102eb31d4a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T03:25:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0aa3bc69-214c-408b-bd69-42102eb31d4a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T03:25:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0aa3bc69-214c-408b-bd69-42102eb31d4a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-811e44"}
{"level":"debug","ts":"2026-07-29T03:25:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0aa3bc69-214c-408b-bd69-42102eb31d4a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"df6406f0-b2f7-4435-b0a2-b87f07aa8428","keyName":"e2e-rate-a-811e44","selected_subscription":"e2e-rate-iso-a-811e44","selected_subscription_key":"ai-tenant-e2e-shared-a-f4870d/e2e-rate-iso-a-811e44@ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-f4870d/models/facebook/opt-125m","name":"rate-test-model-f4870d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-811e44","namespace":"ai-tenant-e2e-shared-a-f4870d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T03:25:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0aa3bc69-214c-408b-bd69-42102eb31d4a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T03:25:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0aa3bc69-214c-408b-bd69-42102eb31d4a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T03:25:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1fb5dcc1-1534-4109-bfb2-50e6aacec495","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:36566","PortSpecifier":{"PortValue":36566}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1fb5dcc1-1534-4109-bfb2-50e6aacec495","method":"POST","path":"/ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d/v1/completions","host":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T03:25:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1fb5dcc1-1534-4109-bfb2-50e6aacec495","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:36566","PortSpecifier":{"PortValue":36566}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785295540,"nanos":733232770},"http":{"id":"1fb5dcc1-1534-4109-bfb2-50e6aacec495","method":"POST","headers":{":authority":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:25:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1fb5dcc1-1534-4109-bfb2-50e6aacec495","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1cujDQk9hBA0D1nl6_e8i5ka4USlRUvWdXuf1Epgce5QLISFa8k3szLB8kuwN"}
{"level":"debug","ts":"2026-07-29T03:25:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1fb5dcc1-1534-4109-bfb2-50e6aacec495","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f4870d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1cujDQk9hBA0D1nl6_e8i5ka4USlRUvWdXuf1Epgce5QLISFa8k3szLB8kuwN\"}"}
{"level":"debug","ts":"2026-07-29T03:25:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1fb5dcc1-1534-4109-bfb2-50e6aacec495","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f4870d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"df6406f0-b2f7-4435-b0a2-b87f07aa8428","keyName":"e2e-rate-a-811e44","subscription":"e2e-rate-iso-a-811e44","tenant":"e2e-shared-a-f4870d","userId":"df6406f0-b2f7-4435-b0a2-b87f07aa8428","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T03:25:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1fb5dcc1-1534-4109-bfb2-50e6aacec495","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f4870d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d\",\"requestedSubscription\":\"e2e-rate-iso-a-811e44\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T03:25:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1fb5dcc1-1534-4109-bfb2-50e6aacec495","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f4870d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-f4870d/models/facebook/opt-125m","name":"rate-test-model-f4870d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-811e44","namespace":"ai-tenant-e2e-shared-a-f4870d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d"}}
{"level":"debug","ts":"2026-07-29T03:25:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1fb5dcc1-1534-4109-bfb2-50e6aacec495","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:25:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1fb5dcc1-1534-4109-bfb2-50e6aacec495","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1fb5dcc1-1534-4109-bfb2-50e6aacec495","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1fb5dcc1-1534-4109-bfb2-50e6aacec495","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1fb5dcc1-1534-4109-bfb2-50e6aacec495","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f4870d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1fb5dcc1-1534-4109-bfb2-50e6aacec495","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T03:25:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1fb5dcc1-1534-4109-bfb2-50e6aacec495","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T03:25:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1fb5dcc1-1534-4109-bfb2-50e6aacec495","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-811e44"}
{"level":"debug","ts":"2026-07-29T03:25:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1fb5dcc1-1534-4109-bfb2-50e6aacec495","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"df6406f0-b2f7-4435-b0a2-b87f07aa8428","keyName":"e2e-rate-a-811e44","selected_subscription":"e2e-rate-iso-a-811e44","selected_subscription_key":"ai-tenant-e2e-shared-a-f4870d/e2e-rate-iso-a-811e44@ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-f4870d/models/facebook/opt-125m","name":"rate-test-model-f4870d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-811e44","namespace":"ai-tenant-e2e-shared-a-f4870d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T03:25:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1fb5dcc1-1534-4109-bfb2-50e6aacec495","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T03:25:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1fb5dcc1-1534-4109-bfb2-50e6aacec495","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T03:25:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f65e8850-c833-41a4-92ec-9de6d6895f7f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:36568","PortSpecifier":{"PortValue":36568}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f65e8850-c833-41a4-92ec-9de6d6895f7f","method":"POST","path":"/ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d/v1/completions","host":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T03:25:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f65e8850-c833-41a4-92ec-9de6d6895f7f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:36568","PortSpecifier":{"PortValue":36568}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785295541,"nanos":768869277},"http":{"id":"f65e8850-c833-41a4-92ec-9de6d6895f7f","method":"POST","headers":{":authority":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:25:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f65e8850-c833-41a4-92ec-9de6d6895f7f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1cujDQk9hBA0D1nl6_e8i5ka4USlRUvWdXuf1Epgce5QLISFa8k3szLB8kuwN"}
{"level":"debug","ts":"2026-07-29T03:25:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f65e8850-c833-41a4-92ec-9de6d6895f7f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f4870d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1cujDQk9hBA0D1nl6_e8i5ka4USlRUvWdXuf1Epgce5QLISFa8k3szLB8kuwN\"}"}
{"level":"debug","ts":"2026-07-29T03:25:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f65e8850-c833-41a4-92ec-9de6d6895f7f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f4870d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"df6406f0-b2f7-4435-b0a2-b87f07aa8428","keyName":"e2e-rate-a-811e44","subscription":"e2e-rate-iso-a-811e44","tenant":"e2e-shared-a-f4870d","userId":"df6406f0-b2f7-4435-b0a2-b87f07aa8428","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T03:25:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f65e8850-c833-41a4-92ec-9de6d6895f7f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f4870d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d\",\"requestedSubscription\":\"e2e-rate-iso-a-811e44\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T03:25:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f65e8850-c833-41a4-92ec-9de6d6895f7f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f4870d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-f4870d/models/facebook/opt-125m","name":"rate-test-model-f4870d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-811e44","namespace":"ai-tenant-e2e-shared-a-f4870d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d"}}
{"level":"debug","ts":"2026-07-29T03:25:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f65e8850-c833-41a4-92ec-9de6d6895f7f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:25:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f65e8850-c833-41a4-92ec-9de6d6895f7f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f65e8850-c833-41a4-92ec-9de6d6895f7f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f65e8850-c833-41a4-92ec-9de6d6895f7f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f65e8850-c833-41a4-92ec-9de6d6895f7f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f4870d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f65e8850-c833-41a4-92ec-9de6d6895f7f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-811e44"}
{"level":"debug","ts":"2026-07-29T03:25:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f65e8850-c833-41a4-92ec-9de6d6895f7f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T03:25:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f65e8850-c833-41a4-92ec-9de6d6895f7f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T03:25:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f65e8850-c833-41a4-92ec-9de6d6895f7f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"df6406f0-b2f7-4435-b0a2-b87f07aa8428","keyName":"e2e-rate-a-811e44","selected_subscription":"e2e-rate-iso-a-811e44","selected_subscription_key":"ai-tenant-e2e-shared-a-f4870d/e2e-rate-iso-a-811e44@ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-f4870d/models/facebook/opt-125m","name":"rate-test-model-f4870d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-811e44","namespace":"ai-tenant-e2e-shared-a-f4870d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T03:25:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f65e8850-c833-41a4-92ec-9de6d6895f7f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T03:25:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f65e8850-c833-41a4-92ec-9de6d6895f7f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T03:25:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3cf1c857-0919-47c4-b1db-26e8c2c94255","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:36576","PortSpecifier":{"PortValue":36576}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3cf1c857-0919-47c4-b1db-26e8c2c94255","method":"POST","path":"/ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d/v1/completions","host":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T03:25:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3cf1c857-0919-47c4-b1db-26e8c2c94255","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:36576","PortSpecifier":{"PortValue":36576}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785295542,"nanos":803672847},"http":{"id":"3cf1c857-0919-47c4-b1db-26e8c2c94255","method":"POST","headers":{":authority":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:25:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3cf1c857-0919-47c4-b1db-26e8c2c94255","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1cujDQk9hBA0D1nl6_e8i5ka4USlRUvWdXuf1Epgce5QLISFa8k3szLB8kuwN"}
{"level":"debug","ts":"2026-07-29T03:25:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3cf1c857-0919-47c4-b1db-26e8c2c94255","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f4870d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1cujDQk9hBA0D1nl6_e8i5ka4USlRUvWdXuf1Epgce5QLISFa8k3szLB8kuwN\"}"}
{"level":"debug","ts":"2026-07-29T03:25:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3cf1c857-0919-47c4-b1db-26e8c2c94255","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f4870d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"df6406f0-b2f7-4435-b0a2-b87f07aa8428","keyName":"e2e-rate-a-811e44","subscription":"e2e-rate-iso-a-811e44","tenant":"e2e-shared-a-f4870d","userId":"df6406f0-b2f7-4435-b0a2-b87f07aa8428","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T03:25:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3cf1c857-0919-47c4-b1db-26e8c2c94255","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f4870d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d\",\"requestedSubscription\":\"e2e-rate-iso-a-811e44\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T03:25:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3cf1c857-0919-47c4-b1db-26e8c2c94255","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f4870d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-f4870d/models/facebook/opt-125m","name":"rate-test-model-f4870d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-811e44","namespace":"ai-tenant-e2e-shared-a-f4870d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d"}}
{"level":"debug","ts":"2026-07-29T03:25:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3cf1c857-0919-47c4-b1db-26e8c2c94255","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:25:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3cf1c857-0919-47c4-b1db-26e8c2c94255","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3cf1c857-0919-47c4-b1db-26e8c2c94255","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3cf1c857-0919-47c4-b1db-26e8c2c94255","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3cf1c857-0919-47c4-b1db-26e8c2c94255","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f4870d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3cf1c857-0919-47c4-b1db-26e8c2c94255","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T03:25:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3cf1c857-0919-47c4-b1db-26e8c2c94255","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T03:25:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3cf1c857-0919-47c4-b1db-26e8c2c94255","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-811e44"}
{"level":"debug","ts":"2026-07-29T03:25:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3cf1c857-0919-47c4-b1db-26e8c2c94255","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"df6406f0-b2f7-4435-b0a2-b87f07aa8428","keyName":"e2e-rate-a-811e44","selected_subscription":"e2e-rate-iso-a-811e44","selected_subscription_key":"ai-tenant-e2e-shared-a-f4870d/e2e-rate-iso-a-811e44@ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-f4870d/models/facebook/opt-125m","name":"rate-test-model-f4870d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-811e44","namespace":"ai-tenant-e2e-shared-a-f4870d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T03:25:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3cf1c857-0919-47c4-b1db-26e8c2c94255","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T03:25:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3cf1c857-0919-47c4-b1db-26e8c2c94255","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T03:25:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1a972fd-3cec-49f4-9dd1-08072f3b48ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:36580","PortSpecifier":{"PortValue":36580}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c1a972fd-3cec-49f4-9dd1-08072f3b48ab","method":"POST","path":"/ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d/v1/completions","host":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T03:25:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1a972fd-3cec-49f4-9dd1-08072f3b48ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:36580","PortSpecifier":{"PortValue":36580}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785295543,"nanos":838208321},"http":{"id":"c1a972fd-3cec-49f4-9dd1-08072f3b48ab","method":"POST","headers":{":authority":"e2e-shared-a-f4870d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:25:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c1a972fd-3cec-49f4-9dd1-08072f3b48ab","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1cujDQk9hBA0D1nl6_e8i5ka4USlRUvWdXuf1Epgce5QLISFa8k3szLB8kuwN"}
{"level":"debug","ts":"2026-07-29T03:25:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c1a972fd-3cec-49f4-9dd1-08072f3b48ab","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f4870d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1cujDQk9hBA0D1nl6_e8i5ka4USlRUvWdXuf1Epgce5QLISFa8k3szLB8kuwN\"}"}
{"level":"debug","ts":"2026-07-29T03:25:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c1a972fd-3cec-49f4-9dd1-08072f3b48ab","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f4870d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"df6406f0-b2f7-4435-b0a2-b87f07aa8428","keyName":"e2e-rate-a-811e44","subscription":"e2e-rate-iso-a-811e44","tenant":"e2e-shared-a-f4870d","userId":"df6406f0-b2f7-4435-b0a2-b87f07aa8428","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T03:25:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c1a972fd-3cec-49f4-9dd1-08072f3b48ab","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f4870d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d\",\"requestedSubscription\":\"e2e-rate-iso-a-811e44\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T03:25:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c1a972fd-3cec-49f4-9dd1-08072f3b48ab","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f4870d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-f4870d/models/facebook/opt-125m","name":"rate-test-model-f4870d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-811e44","namespace":"ai-tenant-e2e-shared-a-f4870d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d"}}
{"level":"debug","ts":"2026-07-29T03:25:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c1a972fd-3cec-49f4-9dd1-08072f3b48ab","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:25:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1a972fd-3cec-49f4-9dd1-08072f3b48ab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1a972fd-3cec-49f4-9dd1-08072f3b48ab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1a972fd-3cec-49f4-9dd1-08072f3b48ab","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1a972fd-3cec-49f4-9dd1-08072f3b48ab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f4870d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1a972fd-3cec-49f4-9dd1-08072f3b48ab","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T03:25:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1a972fd-3cec-49f4-9dd1-08072f3b48ab","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-811e44"}
{"level":"debug","ts":"2026-07-29T03:25:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1a972fd-3cec-49f4-9dd1-08072f3b48ab","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T03:25:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1a972fd-3cec-49f4-9dd1-08072f3b48ab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"df6406f0-b2f7-4435-b0a2-b87f07aa8428","keyName":"e2e-rate-a-811e44","selected_subscription":"e2e-rate-iso-a-811e44","selected_subscription_key":"ai-tenant-e2e-shared-a-f4870d/e2e-rate-iso-a-811e44@ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-f4870d/models/facebook/opt-125m","name":"rate-test-model-f4870d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-811e44","namespace":"ai-tenant-e2e-shared-a-f4870d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-f4870d/rate-test-model-f4870d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T03:25:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1a972fd-3cec-49f4-9dd1-08072f3b48ab","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T03:25:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1a972fd-3cec-49f4-9dd1-08072f3b48ab","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T03:25:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4bf45da-9837-4a55-b619-1956177454aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57178","PortSpecifier":{"PortValue":57178}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f4bf45da-9837-4a55-b619-1956177454aa","method":"POST","path":"/ai-tenant-e2e-shared-b-19184d/rate-test-model-19184d/v1/completions","host":"e2e-shared-b-19184d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T03:25:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4bf45da-9837-4a55-b619-1956177454aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57178","PortSpecifier":{"PortValue":57178}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785295543,"nanos":874393478},"http":{"id":"f4bf45da-9837-4a55-b619-1956177454aa","method":"POST","headers":{":authority":"e2e-shared-b-19184d.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-19184d/rate-test-model-19184d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:25:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f4bf45da-9837-4a55-b619-1956177454aa","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-CWpo0VtCeHcFKfN_9glYtZSdV8j8URXxIVo2JrNVsIkEzicjA36UGUMfdgW"}
{"level":"debug","ts":"2026-07-29T03:25:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f4bf45da-9837-4a55-b619-1956177454aa","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-19184d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-CWpo0VtCeHcFKfN_9glYtZSdV8j8URXxIVo2JrNVsIkEzicjA36UGUMfdgW\"}"}
{"level":"debug","ts":"2026-07-29T03:25:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f4bf45da-9837-4a55-b619-1956177454aa","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-19184d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"aac15fa5-458d-40f8-9ce8-a649e7e860c4","keyName":"e2e-rate-b-811e44","subscription":"e2e-rate-iso-b-811e44","tenant":"e2e-shared-b-19184d","userId":"aac15fa5-458d-40f8-9ce8-a649e7e860c4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T03:25:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f4bf45da-9837-4a55-b619-1956177454aa","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-19184d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-19184d/rate-test-model-19184d\",\"requestedSubscription\":\"e2e-rate-iso-b-811e44\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T03:25:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f4bf45da-9837-4a55-b619-1956177454aa","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-19184d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-19184d/models/facebook/opt-125m","name":"rate-test-model-19184d","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-811e44","namespace":"ai-tenant-e2e-shared-b-19184d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-19184d/rate-test-model-19184d"}}
{"level":"debug","ts":"2026-07-29T03:25:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f4bf45da-9837-4a55-b619-1956177454aa","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:25:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4bf45da-9837-4a55-b619-1956177454aa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4bf45da-9837-4a55-b619-1956177454aa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4bf45da-9837-4a55-b619-1956177454aa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-19184d/rate-test-model-19184d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-19184d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4bf45da-9837-4a55-b619-1956177454aa","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:25:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4bf45da-9837-4a55-b619-1956177454aa","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T03:25:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4bf45da-9837-4a55-b619-1956177454aa","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-811e44"}
{"level":"debug","ts":"2026-07-29T03:25:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4bf45da-9837-4a55-b619-1956177454aa","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T03:25:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4bf45da-9837-4a55-b619-1956177454aa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"aac15fa5-458d-40f8-9ce8-a649e7e860c4","keyName":"e2e-rate-b-811e44","selected_subscription":"e2e-rate-iso-b-811e44","selected_subscription_key":"ai-tenant-e2e-shared-b-19184d/e2e-rate-iso-b-811e44@ai-tenant-e2e-shared-b-19184d/rate-test-model-19184d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-19184d/models/facebook/opt-125m","name":"rate-test-model-19184d","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-811e44","namespace":"ai-tenant-e2e-shared-b-19184d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-19184d/rate-test-model-19184d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T03:25:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4bf45da-9837-4a55-b619-1956177454aa","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T03:25:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4bf45da-9837-4a55-b619-1956177454aa","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T03:25:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f5576c7be636374bb12c3d3b7dfa886153923f6c9a66d9ec3a3c24f7773072d"}
{"level":"info","ts":"2026-07-29T03:25:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef954864eee7c5b88b328af99eb02d1487e68c2fc74f2a39bb1a94e31a139e39"}
{"level":"info","ts":"2026-07-29T03:25:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef9809447830bc0b863f390d52dbc6db2c20286bfdd308fb6413248a236e8eaf"}
{"level":"info","ts":"2026-07-29T03:25:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd9716abeba706efdc84dcc4bbc85a89ab3e24e41aa15cd87ec66228a329fce0"}
{"level":"info","ts":"2026-07-29T03:25:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/723a98e75537fa8cb94fc1f4997a3d6c1187f933ad5ff47bac08bb8f36f98c7c"}
{"level":"info","ts":"2026-07-29T03:25:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/28203cc8d45c4962e6f9c9ae5102d404f7a5fda56cc4514479f979fd9f8d161d"}
{"level":"info","ts":"2026-07-29T03:25:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/90710843952f46e46d74e23e759cd691ffcb8dfb35f6acc91e5d19d7ec016ac1"}
{"level":"info","ts":"2026-07-29T03:25:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e305825257a9aeec92fc6129225af84f6701ba427e4ae55d8857946976a6660"}
{"level":"info","ts":"2026-07-29T03:25:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc864e45ae1aa51dcc97ead2b76c25dc0bc413a02e0953ca40962805baabea0c"}
{"level":"info","ts":"2026-07-29T03:25:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c6e564c986f2adaf3dd0ad9f654c5f98b65ac6fad3330e594a96b094216e8228"}
{"level":"info","ts":"2026-07-29T03:25:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba9e82d0601bac09e106d78c60470ab0465fe6264a8f5db00e4ba42a57db29f7"}
{"level":"info","ts":"2026-07-29T03:25:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df3ed2c352ba19593680732e4714f7fe6ecfc3a19c17d743c87e6445fb2eca20"}
{"level":"info","ts":"2026-07-29T03:25:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f68442a6056841c60dc8e72e85fbd53a117239d0b001b8d05424333b406d6b2"}
{"level":"info","ts":"2026-07-29T03:25:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/610501e18ee9fc08c64aa226b82fa9caf12c634d84e2685b0f8ef40b4067230a"}
{"level":"info","ts":"2026-07-29T03:25:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/016dd25deae803fbda84ce7ed0c77b51516c2e7386c8c6a88d2e32b14f308afb"}
{"level":"info","ts":"2026-07-29T03:25:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dbad1d27e5ff20dc86f3968c379c8253dcb38ed06de72774ed4200e01c98b35f"}
{"level":"info","ts":"2026-07-29T03:25:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b2545bb8d505c1251dbe44fe1e6baadd7da9f3fd419303a5a2a70bf16f7a1bfb"}
{"level":"info","ts":"2026-07-29T03:25:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ca8ddb1952613363378b1dc8345aba2603d6dfd543b791e875cfa4d523b2de82"}
{"level":"info","ts":"2026-07-29T03:25:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eee13f980e3ad9c435183fa00cc8b0c610253522c34629552db27cb7092e78cf"}
{"level":"info","ts":"2026-07-29T03:25:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e32e9a4e6edc89be6268a597ffecd258fd5f73e0c20f426ca1a54e83e1a2fcf"}
{"level":"info","ts":"2026-07-29T03:25:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/079570865a7b95ae8fc03d5334c0162bfaa75fdf34b064aa3033b2495a9320e3"}
{"level":"info","ts":"2026-07-29T03:25:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/891a529cb9d13bd5bc469f524354e160b30281095530282054f538b6bfb3134e"}
{"level":"info","ts":"2026-07-29T03:25:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11607d87d9c6661755fa895f71c8951bcf4b08ecc1bff600fa5b9fb3d8aa78bb"}
{"level":"info","ts":"2026-07-29T03:25:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25d2ddf74e15f591b7b6b2def56ac47db0b8d1674fffe8f3c9d7f3569e8ac1a5"}
{"level":"info","ts":"2026-07-29T03:27:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dbef03f7-d3ee-448c-a200-b8f697fec2d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:44452","PortSpecifier":{"PortValue":44452}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.32:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dbef03f7-d3ee-448c-a200-b8f697fec2d1","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T03:27:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dbef03f7-d3ee-448c-a200-b8f697fec2d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:44452","PortSpecifier":{"PortValue":44452}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.32:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785295630,"nanos":423961701},"http":{"id":"dbef03f7-d3ee-448c-a200-b8f697fec2d1","method":"POST","headers":{":authority":"maas.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:27:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dbef03f7-d3ee-448c-a200-b8f697fec2d1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T03:27:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dbef03f7-d3ee-448c-a200-b8f697fec2d1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1618919a-3ba0-4198-a1c1-cb1ddccaf188","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f8a80838-796d-4745-8e65-dede54c057eb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e8a4b9e0ac87"]}}
{"level":"debug","ts":"2026-07-29T03:27:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dbef03f7-d3ee-448c-a200-b8f697fec2d1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e8a4b9e0ac87"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f8a80838-796d-4745-8e65-dede54c057eb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1618919a-3ba0-4198-a1c1-cb1ddccaf188","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.32:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:27:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dbef03f7-d3ee-448c-a200-b8f697fec2d1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:27:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dbef03f7-d3ee-448c-a200-b8f697fec2d1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:27:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dbef03f7-d3ee-448c-a200-b8f697fec2d1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:27:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dbef03f7-d3ee-448c-a200-b8f697fec2d1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T03:27:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dbef03f7-d3ee-448c-a200-b8f697fec2d1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T03:27:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dbef03f7-d3ee-448c-a200-b8f697fec2d1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-29T03:27:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dbef03f7-d3ee-448c-a200-b8f697fec2d1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T03:27:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dbef03f7-d3ee-448c-a200-b8f697fec2d1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T03:27:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"033d8c4c-44d8-443b-8817-164b0e75ea64","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:44454","PortSpecifier":{"PortValue":44454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.32:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"033d8c4c-44d8-443b-8817-164b0e75ea64","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T03:27:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"033d8c4c-44d8-443b-8817-164b0e75ea64","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:44454","PortSpecifier":{"PortValue":44454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.32:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785295630,"nanos":473718445},"http":{"id":"033d8c4c-44d8-443b-8817-164b0e75ea64","method":"POST","headers":{":authority":"maas.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:27:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"033d8c4c-44d8-443b-8817-164b0e75ea64","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1F3ZRw7ghzxqPX5bC_iu2F7FvRC8dbPnaA3PExIoq3f0zOnJYtOiQ3y73qH1q"}
{"level":"debug","ts":"2026-07-29T03:27:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"033d8c4c-44d8-443b-8817-164b0e75ea64","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1F3ZRw7ghzxqPX5bC_iu2F7FvRC8dbPnaA3PExIoq3f0zOnJYtOiQ3y73qH1q\"}"}
{"level":"debug","ts":"2026-07-29T03:27:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"033d8c4c-44d8-443b-8817-164b0e75ea64","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0afd176e-263c-49a5-92e9-df512f61960a","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"0afd176e-263c-49a5-92e9-df512f61960a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T03:27:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"033d8c4c-44d8-443b-8817-164b0e75ea64","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T03:27:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"033d8c4c-44d8-443b-8817-164b0e75ea64","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}
{"level":"debug","ts":"2026-07-29T03:27:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"033d8c4c-44d8-443b-8817-164b0e75ea64","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.32:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:27:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"033d8c4c-44d8-443b-8817-164b0e75ea64","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:27:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"033d8c4c-44d8-443b-8817-164b0e75ea64","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:27:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"033d8c4c-44d8-443b-8817-164b0e75ea64","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:27:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"033d8c4c-44d8-443b-8817-164b0e75ea64","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:27:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"033d8c4c-44d8-443b-8817-164b0e75ea64","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T03:27:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"033d8c4c-44d8-443b-8817-164b0e75ea64","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-07-29T03:27:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"033d8c4c-44d8-443b-8817-164b0e75ea64","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T03:27:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"033d8c4c-44d8-443b-8817-164b0e75ea64","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0afd176e-263c-49a5-92e9-df512f61960a","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T03:27:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"033d8c4c-44d8-443b-8817-164b0e75ea64","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T03:27:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"033d8c4c-44d8-443b-8817-164b0e75ea64","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb8f1404f5a98ba891c9b71a48bf10b173f94fe68d14fc73cb1a4c64942571eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:27:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:27:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb8f1404f5a98ba891c9b71a48bf10b173f94fe68d14fc73cb1a4c64942571eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb8f1404f5a98ba891c9b71a48bf10b173f94fe68d14fc73cb1a4c64942571eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:27:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:27:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb8f1404f5a98ba891c9b71a48bf10b173f94fe68d14fc73cb1a4c64942571eb"}
{"level":"info","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb8f1404f5a98ba891c9b71a48bf10b173f94fe68d14fc73cb1a4c64942571eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb8f1404f5a98ba891c9b71a48bf10b173f94fe68d14fc73cb1a4c64942571eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:27:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:27:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"eb8f1404f5a98ba891c9b71a48bf10b173f94fe68d14fc73cb1a4c64942571eb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"eb8f1404f5a98ba891c9b71a48bf10b173f94fe68d14fc73cb1a4c64942571eb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb8f1404f5a98ba891c9b71a48bf10b173f94fe68d14fc73cb1a4c64942571eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb8f1404f5a98ba891c9b71a48bf10b173f94fe68d14fc73cb1a4c64942571eb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb8f1404f5a98ba891c9b71a48bf10b173f94fe68d14fc73cb1a4c64942571eb"}
{"level":"info","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb8f1404f5a98ba891c9b71a48bf10b173f94fe68d14fc73cb1a4c64942571eb"}
{"level":"debug","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ceeffcec6d22a270b460518de80e924fc26c8e1ddff2808503563f9348190fa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:27:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:27:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ceeffcec6d22a270b460518de80e924fc26c8e1ddff2808503563f9348190fa0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ceeffcec6d22a270b460518de80e924fc26c8e1ddff2808503563f9348190fa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:27:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:27:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ceeffcec6d22a270b460518de80e924fc26c8e1ddff2808503563f9348190fa0"}
{"level":"info","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ceeffcec6d22a270b460518de80e924fc26c8e1ddff2808503563f9348190fa0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ceeffcec6d22a270b460518de80e924fc26c8e1ddff2808503563f9348190fa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:27:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:27:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ceeffcec6d22a270b460518de80e924fc26c8e1ddff2808503563f9348190fa0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ceeffcec6d22a270b460518de80e924fc26c8e1ddff2808503563f9348190fa0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb8f1404f5a98ba891c9b71a48bf10b173f94fe68d14fc73cb1a4c64942571eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:27:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:27:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb8f1404f5a98ba891c9b71a48bf10b173f94fe68d14fc73cb1a4c64942571eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb8f1404f5a98ba891c9b71a48bf10b173f94fe68d14fc73cb1a4c64942571eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ceeffcec6d22a270b460518de80e924fc26c8e1ddff2808503563f9348190fa0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb8f1404f5a98ba891c9b71a48bf10b173f94fe68d14fc73cb1a4c64942571eb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ceeffcec6d22a270b460518de80e924fc26c8e1ddff2808503563f9348190fa0"}
{"level":"info","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb8f1404f5a98ba891c9b71a48bf10b173f94fe68d14fc73cb1a4c64942571eb"}
{"level":"debug","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ceeffcec6d22a270b460518de80e924fc26c8e1ddff2808503563f9348190fa0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ceeffcec6d22a270b460518de80e924fc26c8e1ddff2808503563f9348190fa0"}
{"level":"debug","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"243d597baffc577399accdeef16e98b0b6c58eae0017e8c9cee7e7d19c70f3ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:27:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:27:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"243d597baffc577399accdeef16e98b0b6c58eae0017e8c9cee7e7d19c70f3ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"243d597baffc577399accdeef16e98b0b6c58eae0017e8c9cee7e7d19c70f3ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"243d597baffc577399accdeef16e98b0b6c58eae0017e8c9cee7e7d19c70f3ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/243d597baffc577399accdeef16e98b0b6c58eae0017e8c9cee7e7d19c70f3ce"}
{"level":"debug","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"243d597baffc577399accdeef16e98b0b6c58eae0017e8c9cee7e7d19c70f3ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/243d597baffc577399accdeef16e98b0b6c58eae0017e8c9cee7e7d19c70f3ce"}
{"level":"debug","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ceeffcec6d22a270b460518de80e924fc26c8e1ddff2808503563f9348190fa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:27:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:27:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ceeffcec6d22a270b460518de80e924fc26c8e1ddff2808503563f9348190fa0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ceeffcec6d22a270b460518de80e924fc26c8e1ddff2808503563f9348190fa0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"243d597baffc577399accdeef16e98b0b6c58eae0017e8c9cee7e7d19c70f3ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:27:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:27:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["243d597baffc577399accdeef16e98b0b6c58eae0017e8c9cee7e7d19c70f3ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"243d597baffc577399accdeef16e98b0b6c58eae0017e8c9cee7e7d19c70f3ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ceeffcec6d22a270b460518de80e924fc26c8e1ddff2808503563f9348190fa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:27:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:27:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ceeffcec6d22a270b460518de80e924fc26c8e1ddff2808503563f9348190fa0"}
{"level":"info","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ceeffcec6d22a270b460518de80e924fc26c8e1ddff2808503563f9348190fa0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"243d597baffc577399accdeef16e98b0b6c58eae0017e8c9cee7e7d19c70f3ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:27:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:27:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"243d597baffc577399accdeef16e98b0b6c58eae0017e8c9cee7e7d19c70f3ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ceeffcec6d22a270b460518de80e924fc26c8e1ddff2808503563f9348190fa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:27:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:27:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ceeffcec6d22a270b460518de80e924fc26c8e1ddff2808503563f9348190fa0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/243d597baffc577399accdeef16e98b0b6c58eae0017e8c9cee7e7d19c70f3ce"}
{"level":"info","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ceeffcec6d22a270b460518de80e924fc26c8e1ddff2808503563f9348190fa0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"243d597baffc577399accdeef16e98b0b6c58eae0017e8c9cee7e7d19c70f3ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:27:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:27:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["243d597baffc577399accdeef16e98b0b6c58eae0017e8c9cee7e7d19c70f3ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"243d597baffc577399accdeef16e98b0b6c58eae0017e8c9cee7e7d19c70f3ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ceeffcec6d22a270b460518de80e924fc26c8e1ddff2808503563f9348190fa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:27:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:27:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ceeffcec6d22a270b460518de80e924fc26c8e1ddff2808503563f9348190fa0"}
{"level":"info","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ceeffcec6d22a270b460518de80e924fc26c8e1ddff2808503563f9348190fa0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"243d597baffc577399accdeef16e98b0b6c58eae0017e8c9cee7e7d19c70f3ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:27:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:27:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/243d597baffc577399accdeef16e98b0b6c58eae0017e8c9cee7e7d19c70f3ce"}
{"level":"info","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"243d597baffc577399accdeef16e98b0b6c58eae0017e8c9cee7e7d19c70f3ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ceeffcec6d22a270b460518de80e924fc26c8e1ddff2808503563f9348190fa0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"243d597baffc577399accdeef16e98b0b6c58eae0017e8c9cee7e7d19c70f3ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:27:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:27:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["243d597baffc577399accdeef16e98b0b6c58eae0017e8c9cee7e7d19c70f3ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"243d597baffc577399accdeef16e98b0b6c58eae0017e8c9cee7e7d19c70f3ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ceeffcec6d22a270b460518de80e924fc26c8e1ddff2808503563f9348190fa0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"243d597baffc577399accdeef16e98b0b6c58eae0017e8c9cee7e7d19c70f3ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:27:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:27:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["243d597baffc577399accdeef16e98b0b6c58eae0017e8c9cee7e7d19c70f3ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ceeffcec6d22a270b460518de80e924fc26c8e1ddff2808503563f9348190fa0"}
{"level":"error","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"243d597baffc577399accdeef16e98b0b6c58eae0017e8c9cee7e7d19c70f3ce","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"243d597baffc577399accdeef16e98b0b6c58eae0017e8c9cee7e7d19c70f3ce\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"243d597baffc577399accdeef16e98b0b6c58eae0017e8c9cee7e7d19c70f3ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:27:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:27:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"243d597baffc577399accdeef16e98b0b6c58eae0017e8c9cee7e7d19c70f3ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ece92bf393ab7d67b82f4334c69ac4e7292c25ad63cbb753b509af047b4320ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:27:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:27:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/243d597baffc577399accdeef16e98b0b6c58eae0017e8c9cee7e7d19c70f3ce"}
{"level":"info","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ece92bf393ab7d67b82f4334c69ac4e7292c25ad63cbb753b509af047b4320ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ceeffcec6d22a270b460518de80e924fc26c8e1ddff2808503563f9348190fa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:27:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:27:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ceeffcec6d22a270b460518de80e924fc26c8e1ddff2808503563f9348190fa0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ceeffcec6d22a270b460518de80e924fc26c8e1ddff2808503563f9348190fa0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ece92bf393ab7d67b82f4334c69ac4e7292c25ad63cbb753b509af047b4320ca"}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"243d597baffc577399accdeef16e98b0b6c58eae0017e8c9cee7e7d19c70f3ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ece92bf393ab7d67b82f4334c69ac4e7292c25ad63cbb753b509af047b4320ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ece92bf393ab7d67b82f4334c69ac4e7292c25ad63cbb753b509af047b4320ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ece92bf393ab7d67b82f4334c69ac4e7292c25ad63cbb753b509af047b4320ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ceeffcec6d22a270b460518de80e924fc26c8e1ddff2808503563f9348190fa0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ece92bf393ab7d67b82f4334c69ac4e7292c25ad63cbb753b509af047b4320ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"243d597baffc577399accdeef16e98b0b6c58eae0017e8c9cee7e7d19c70f3ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/243d597baffc577399accdeef16e98b0b6c58eae0017e8c9cee7e7d19c70f3ce"}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ece92bf393ab7d67b82f4334c69ac4e7292c25ad63cbb753b509af047b4320ca"}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ceeffcec6d22a270b460518de80e924fc26c8e1ddff2808503563f9348190fa0"}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"243d597baffc577399accdeef16e98b0b6c58eae0017e8c9cee7e7d19c70f3ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["243d597baffc577399accdeef16e98b0b6c58eae0017e8c9cee7e7d19c70f3ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"243d597baffc577399accdeef16e98b0b6c58eae0017e8c9cee7e7d19c70f3ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"243d597baffc577399accdeef16e98b0b6c58eae0017e8c9cee7e7d19c70f3ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"243d597baffc577399accdeef16e98b0b6c58eae0017e8c9cee7e7d19c70f3ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"243d597baffc577399accdeef16e98b0b6c58eae0017e8c9cee7e7d19c70f3ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"243d597baffc577399accdeef16e98b0b6c58eae0017e8c9cee7e7d19c70f3ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/243d597baffc577399accdeef16e98b0b6c58eae0017e8c9cee7e7d19c70f3ce"}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"243d597baffc577399accdeef16e98b0b6c58eae0017e8c9cee7e7d19c70f3ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/243d597baffc577399accdeef16e98b0b6c58eae0017e8c9cee7e7d19c70f3ce"}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"243d597baffc577399accdeef16e98b0b6c58eae0017e8c9cee7e7d19c70f3ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["243d597baffc577399accdeef16e98b0b6c58eae0017e8c9cee7e7d19c70f3ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"243d597baffc577399accdeef16e98b0b6c58eae0017e8c9cee7e7d19c70f3ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e231a523de9543b85a893b0388d4a81e5d121a80627706cb7a8a74982a150964","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e231a523de9543b85a893b0388d4a81e5d121a80627706cb7a8a74982a150964","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"243d597baffc577399accdeef16e98b0b6c58eae0017e8c9cee7e7d19c70f3ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e231a523de9543b85a893b0388d4a81e5d121a80627706cb7a8a74982a150964","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e231a523de9543b85a893b0388d4a81e5d121a80627706cb7a8a74982a150964"}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e231a523de9543b85a893b0388d4a81e5d121a80627706cb7a8a74982a150964","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e231a523de9543b85a893b0388d4a81e5d121a80627706cb7a8a74982a150964"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e231a523de9543b85a893b0388d4a81e5d121a80627706cb7a8a74982a150964","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e231a523de9543b85a893b0388d4a81e5d121a80627706cb7a8a74982a150964","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/243d597baffc577399accdeef16e98b0b6c58eae0017e8c9cee7e7d19c70f3ce"}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e231a523de9543b85a893b0388d4a81e5d121a80627706cb7a8a74982a150964"}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a20289d2075d390f9fc585eba2a70b38dde6d1a010c7caf071e63fd21726f34e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a20289d2075d390f9fc585eba2a70b38dde6d1a010c7caf071e63fd21726f34e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a20289d2075d390f9fc585eba2a70b38dde6d1a010c7caf071e63fd21726f34e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a20289d2075d390f9fc585eba2a70b38dde6d1a010c7caf071e63fd21726f34e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a20289d2075d390f9fc585eba2a70b38dde6d1a010c7caf071e63fd21726f34e"}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a20289d2075d390f9fc585eba2a70b38dde6d1a010c7caf071e63fd21726f34e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a20289d2075d390f9fc585eba2a70b38dde6d1a010c7caf071e63fd21726f34e"}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a20289d2075d390f9fc585eba2a70b38dde6d1a010c7caf071e63fd21726f34e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a20289d2075d390f9fc585eba2a70b38dde6d1a010c7caf071e63fd21726f34e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a20289d2075d390f9fc585eba2a70b38dde6d1a010c7caf071e63fd21726f34e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a20289d2075d390f9fc585eba2a70b38dde6d1a010c7caf071e63fd21726f34e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a20289d2075d390f9fc585eba2a70b38dde6d1a010c7caf071e63fd21726f34e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2f3b655e05b9850c3a41baee2b1c3f35f98348c9300a388e5f534c54f836eec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2f3b655e05b9850c3a41baee2b1c3f35f98348c9300a388e5f534c54f836eec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a20289d2075d390f9fc585eba2a70b38dde6d1a010c7caf071e63fd21726f34e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6b4c2fe057d4007df9936dacb62e2b2af4fec6d2c54a9e11277c9661046ffe3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a20289d2075d390f9fc585eba2a70b38dde6d1a010c7caf071e63fd21726f34e"}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6b4c2fe057d4007df9936dacb62e2b2af4fec6d2c54a9e11277c9661046ffe3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2f3b655e05b9850c3a41baee2b1c3f35f98348c9300a388e5f534c54f836eec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2f3b655e05b9850c3a41baee2b1c3f35f98348c9300a388e5f534c54f836eec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a20289d2075d390f9fc585eba2a70b38dde6d1a010c7caf071e63fd21726f34e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a20289d2075d390f9fc585eba2a70b38dde6d1a010c7caf071e63fd21726f34e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2f3b655e05b9850c3a41baee2b1c3f35f98348c9300a388e5f534c54f836eec"}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a20289d2075d390f9fc585eba2a70b38dde6d1a010c7caf071e63fd21726f34e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6b4c2fe057d4007df9936dacb62e2b2af4fec6d2c54a9e11277c9661046ffe3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6b4c2fe057d4007df9936dacb62e2b2af4fec6d2c54a9e11277c9661046ffe3"}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6b4c2fe057d4007df9936dacb62e2b2af4fec6d2c54a9e11277c9661046ffe3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2f3b655e05b9850c3a41baee2b1c3f35f98348c9300a388e5f534c54f836eec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2f3b655e05b9850c3a41baee2b1c3f35f98348c9300a388e5f534c54f836eec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2f3b655e05b9850c3a41baee2b1c3f35f98348c9300a388e5f534c54f836eec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a20289d2075d390f9fc585eba2a70b38dde6d1a010c7caf071e63fd21726f34e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a20289d2075d390f9fc585eba2a70b38dde6d1a010c7caf071e63fd21726f34e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6b4c2fe057d4007df9936dacb62e2b2af4fec6d2c54a9e11277c9661046ffe3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6b4c2fe057d4007df9936dacb62e2b2af4fec6d2c54a9e11277c9661046ffe3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a20289d2075d390f9fc585eba2a70b38dde6d1a010c7caf071e63fd21726f34e"}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6b4c2fe057d4007df9936dacb62e2b2af4fec6d2c54a9e11277c9661046ffe3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2f3b655e05b9850c3a41baee2b1c3f35f98348c9300a388e5f534c54f836eec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2f3b655e05b9850c3a41baee2b1c3f35f98348c9300a388e5f534c54f836eec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6dbe8e76341abd3d65972a79f08e8f47ad3df94c9c32f2d0912ed76bfbe02af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6dbe8e76341abd3d65972a79f08e8f47ad3df94c9c32f2d0912ed76bfbe02af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a20289d2075d390f9fc585eba2a70b38dde6d1a010c7caf071e63fd21726f34e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a20289d2075d390f9fc585eba2a70b38dde6d1a010c7caf071e63fd21726f34e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2f3b655e05b9850c3a41baee2b1c3f35f98348c9300a388e5f534c54f836eec"}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a20289d2075d390f9fc585eba2a70b38dde6d1a010c7caf071e63fd21726f34e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6b4c2fe057d4007df9936dacb62e2b2af4fec6d2c54a9e11277c9661046ffe3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6b4c2fe057d4007df9936dacb62e2b2af4fec6d2c54a9e11277c9661046ffe3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2f3b655e05b9850c3a41baee2b1c3f35f98348c9300a388e5f534c54f836eec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2f3b655e05b9850c3a41baee2b1c3f35f98348c9300a388e5f534c54f836eec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6b4c2fe057d4007df9936dacb62e2b2af4fec6d2c54a9e11277c9661046ffe3"}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2f3b655e05b9850c3a41baee2b1c3f35f98348c9300a388e5f534c54f836eec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6dbe8e76341abd3d65972a79f08e8f47ad3df94c9c32f2d0912ed76bfbe02af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6dbe8e76341abd3d65972a79f08e8f47ad3df94c9c32f2d0912ed76bfbe02af"}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6dbe8e76341abd3d65972a79f08e8f47ad3df94c9c32f2d0912ed76bfbe02af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a20289d2075d390f9fc585eba2a70b38dde6d1a010c7caf071e63fd21726f34e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a20289d2075d390f9fc585eba2a70b38dde6d1a010c7caf071e63fd21726f34e"}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a20289d2075d390f9fc585eba2a70b38dde6d1a010c7caf071e63fd21726f34e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6b4c2fe057d4007df9936dacb62e2b2af4fec6d2c54a9e11277c9661046ffe3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6b4c2fe057d4007df9936dacb62e2b2af4fec6d2c54a9e11277c9661046ffe3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6b4c2fe057d4007df9936dacb62e2b2af4fec6d2c54a9e11277c9661046ffe3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0b717c90ff613ceca1df41cf566d214859ad4cb2013ac0d4779703c686c03f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2f3b655e05b9850c3a41baee2b1c3f35f98348c9300a388e5f534c54f836eec"}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0b717c90ff613ceca1df41cf566d214859ad4cb2013ac0d4779703c686c03f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2f3b655e05b9850c3a41baee2b1c3f35f98348c9300a388e5f534c54f836eec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f229246f9f1c58cace13e248732593f60c48349c724ffaa72678275e34db8dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0b717c90ff613ceca1df41cf566d214859ad4cb2013ac0d4779703c686c03f2"}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f229246f9f1c58cace13e248732593f60c48349c724ffaa72678275e34db8dda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6dbe8e76341abd3d65972a79f08e8f47ad3df94c9c32f2d0912ed76bfbe02af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6dbe8e76341abd3d65972a79f08e8f47ad3df94c9c32f2d0912ed76bfbe02af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6dbe8e76341abd3d65972a79f08e8f47ad3df94c9c32f2d0912ed76bfbe02af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6927ca7537dff69d692c239d49fbc51d171c7d72a8302450e02ba5163e058ebe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6b4c2fe057d4007df9936dacb62e2b2af4fec6d2c54a9e11277c9661046ffe3"}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6927ca7537dff69d692c239d49fbc51d171c7d72a8302450e02ba5163e058ebe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a20289d2075d390f9fc585eba2a70b38dde6d1a010c7caf071e63fd21726f34e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a20289d2075d390f9fc585eba2a70b38dde6d1a010c7caf071e63fd21726f34e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f229246f9f1c58cace13e248732593f60c48349c724ffaa72678275e34db8dda"}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a20289d2075d390f9fc585eba2a70b38dde6d1a010c7caf071e63fd21726f34e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6b4c2fe057d4007df9936dacb62e2b2af4fec6d2c54a9e11277c9661046ffe3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0b717c90ff613ceca1df41cf566d214859ad4cb2013ac0d4779703c686c03f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0b717c90ff613ceca1df41cf566d214859ad4cb2013ac0d4779703c686c03f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0b717c90ff613ceca1df41cf566d214859ad4cb2013ac0d4779703c686c03f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f229246f9f1c58cace13e248732593f60c48349c724ffaa72678275e34db8dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f229246f9f1c58cace13e248732593f60c48349c724ffaa72678275e34db8dda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6dbe8e76341abd3d65972a79f08e8f47ad3df94c9c32f2d0912ed76bfbe02af"}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f229246f9f1c58cace13e248732593f60c48349c724ffaa72678275e34db8dda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6dbe8e76341abd3d65972a79f08e8f47ad3df94c9c32f2d0912ed76bfbe02af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6927ca7537dff69d692c239d49fbc51d171c7d72a8302450e02ba5163e058ebe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6927ca7537dff69d692c239d49fbc51d171c7d72a8302450e02ba5163e058ebe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a20289d2075d390f9fc585eba2a70b38dde6d1a010c7caf071e63fd21726f34e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0b717c90ff613ceca1df41cf566d214859ad4cb2013ac0d4779703c686c03f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f229246f9f1c58cace13e248732593f60c48349c724ffaa72678275e34db8dda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6927ca7537dff69d692c239d49fbc51d171c7d72a8302450e02ba5163e058ebe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6927ca7537dff69d692c239d49fbc51d171c7d72a8302450e02ba5163e058ebe"}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6927ca7537dff69d692c239d49fbc51d171c7d72a8302450e02ba5163e058ebe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T03:27:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6927ca7537dff69d692c239d49fbc51d171c7d72a8302450e02ba5163e058ebe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a20289d2075d390f9fc585eba2a70b38dde6d1a010c7caf071e63fd21726f34e"}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6927ca7537dff69d692c239d49fbc51d171c7d72a8302450e02ba5163e058ebe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6927ca7537dff69d692c239d49fbc51d171c7d72a8302450e02ba5163e058ebe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0b717c90ff613ceca1df41cf566d214859ad4cb2013ac0d4779703c686c03f2"}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f229246f9f1c58cace13e248732593f60c48349c724ffaa72678275e34db8dda"}
{"level":"info","ts":"2026-07-29T03:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6927ca7537dff69d692c239d49fbc51d171c7d72a8302450e02ba5163e058ebe"}
{"level":"info","ts":"2026-07-29T03:28:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79b4aba5-7e2f-40ab-b9bf-00595aeac003","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:49928","PortSpecifier":{"PortValue":49928}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"79b4aba5-7e2f-40ab-b9bf-00595aeac003","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-bf2f02.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T03:28:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79b4aba5-7e2f-40ab-b9bf-00595aeac003","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:49928","PortSpecifier":{"PortValue":49928}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785295693,"nanos":827863858},"http":{"id":"79b4aba5-7e2f-40ab-b9bf-00595aeac003","method":"POST","headers":{":authority":"e2e-ipp-a-bf2f02.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:28:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"79b4aba5-7e2f-40ab-b9bf-00595aeac003","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T03:28:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"79b4aba5-7e2f-40ab-b9bf-00595aeac003","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1618919a-3ba0-4198-a1c1-cb1ddccaf188","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f8a80838-796d-4745-8e65-dede54c057eb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e8a4b9e0ac87"]}}
{"level":"debug","ts":"2026-07-29T03:28:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"79b4aba5-7e2f-40ab-b9bf-00595aeac003","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e8a4b9e0ac87"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f8a80838-796d-4745-8e65-dede54c057eb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1618919a-3ba0-4198-a1c1-cb1ddccaf188","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a20289d2075d390f9fc585eba2a70b38dde6d1a010c7caf071e63fd21726f34e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.73:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-bf2f02.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:28:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79b4aba5-7e2f-40ab-b9bf-00595aeac003","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:28:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79b4aba5-7e2f-40ab-b9bf-00595aeac003","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:28:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79b4aba5-7e2f-40ab-b9bf-00595aeac003","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-bf2f02/ipp-route-bf2f02\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-bf2f02/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:28:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"79b4aba5-7e2f-40ab-b9bf-00595aeac003","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T03:28:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79b4aba5-7e2f-40ab-b9bf-00595aeac003","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T03:28:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79b4aba5-7e2f-40ab-b9bf-00595aeac003","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-29T03:28:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79b4aba5-7e2f-40ab-b9bf-00595aeac003","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T03:28:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79b4aba5-7e2f-40ab-b9bf-00595aeac003","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T03:28:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be8aa53a-d92d-4149-a0a9-01e16b2e3f0f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:49930","PortSpecifier":{"PortValue":49930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"be8aa53a-d92d-4149-a0a9-01e16b2e3f0f","method":"POST","path":"/ai-tenant-e2e-ipp-a-bf2f02/ipp-route-bf2f02/v1/chat/completions","host":"e2e-ipp-a-bf2f02.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T03:28:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be8aa53a-d92d-4149-a0a9-01e16b2e3f0f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:49930","PortSpecifier":{"PortValue":49930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785295695,"nanos":890493012},"http":{"id":"be8aa53a-d92d-4149-a0a9-01e16b2e3f0f","method":"POST","headers":{":authority":"e2e-ipp-a-bf2f02.apps.50418d7e-3d95-429e-9d2a-e8a4b9e0ac87.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-bf2f02/ipp-route-bf2f02/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:28:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"be8aa53a-d92d-4149-a0a9-01e16b2e3f0f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-hUERxrPAJExrdy3f_oroVS7ljhEhq3oFBgd1ihjPIme1LXJHKM1EbQ14HOHr"}
{"level":"debug","ts":"2026-07-29T03:28:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"be8aa53a-d92d-4149-a0a9-01e16b2e3f0f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-bf2f02.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-hUERxrPAJExrdy3f_oroVS7ljhEhq3oFBgd1ihjPIme1LXJHKM1EbQ14HOHr\"}"}
{"level":"debug","ts":"2026-07-29T03:28:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"be8aa53a-d92d-4149-a0a9-01e16b2e3f0f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-bf2f02.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fedf6365-453d-4282-b507-5f03c4b8720f","keyName":"e2e-ipp-bf2f02","subscription":"ipp-route-bf2f02-sub","tenant":"e2e-ipp-a-bf2f02","userId":"fedf6365-453d-4282-b507-5f03c4b8720f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T03:28:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"be8aa53a-d92d-4149-a0a9-01e16b2e3f0f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-bf2f02.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-bf2f02/ipp-route-bf2f02\",\"requestedSubscription\":\"ipp-route-bf2f02-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T03:28:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"be8aa53a-d92d-4149-a0a9-01e16b2e3f0f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-bf2f02.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-bf2f02/models/facebook/opt-125m","name":"ipp-route-bf2f02","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-bf2f02-sub","namespace":"ai-tenant-e2e-ipp-a-bf2f02","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-bf2f02/ipp-route-bf2f02"}}
{"level":"debug","ts":"2026-07-29T03:28:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"be8aa53a-d92d-4149-a0a9-01e16b2e3f0f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T03:28:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be8aa53a-d92d-4149-a0a9-01e16b2e3f0f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:28:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be8aa53a-d92d-4149-a0a9-01e16b2e3f0f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:28:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be8aa53a-d92d-4149-a0a9-01e16b2e3f0f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:28:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be8aa53a-d92d-4149-a0a9-01e16b2e3f0f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-bf2f02/ipp-route-bf2f02\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-bf2f02/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T03:28:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be8aa53a-d92d-4149-a0a9-01e16b2e3f0f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T03:28:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be8aa53a-d92d-4149-a0a9-01e16b2e3f0f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T03:28:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be8aa53a-d92d-4149-a0a9-01e16b2e3f0f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-bf2f02-sub"}
{"level":"debug","ts":"2026-07-29T03:28:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be8aa53a-d92d-4149-a0a9-01e16b2e3f0f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fedf6365-453d-4282-b507-5f03c4b8720f","keyName":"e2e-ipp-bf2f02","selected_subscription":"ipp-route-bf2f02-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-bf2f02/ipp-route-bf2f02-sub@ai-tenant-e2e-ipp-a-bf2f02/ipp-route-bf2f02","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-bf2f02/models/facebook/opt-125m","name":"ipp-route-bf2f02","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-bf2f02-sub","namespace":"ai-tenant-e2e-ipp-a-bf2f02","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-bf2f02/ipp-route-bf2f02"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T03:28:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be8aa53a-d92d-4149-a0a9-01e16b2e3f0f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T03:28:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be8aa53a-d92d-4149-a0a9-01e16b2e3f0f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T03:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb8f1404f5a98ba891c9b71a48bf10b173f94fe68d14fc73cb1a4c64942571eb"}
{"level":"info","ts":"2026-07-29T03:29:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e231a523de9543b85a893b0388d4a81e5d121a80627706cb7a8a74982a150964"}
{"level":"info","ts":"2026-07-29T03:29:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0b717c90ff613ceca1df41cf566d214859ad4cb2013ac0d4779703c686c03f2"}
{"level":"info","ts":"2026-07-29T03:29:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6927ca7537dff69d692c239d49fbc51d171c7d72a8302450e02ba5163e058ebe"}
{"level":"info","ts":"2026-07-29T03:29:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e2f3b655e05b9850c3a41baee2b1c3f35f98348c9300a388e5f534c54f836eec"}
{"level":"info","ts":"2026-07-29T03:29:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a20289d2075d390f9fc585eba2a70b38dde6d1a010c7caf071e63fd21726f34e"}
{"level":"info","ts":"2026-07-29T03:29:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b6b4c2fe057d4007df9936dacb62e2b2af4fec6d2c54a9e11277c9661046ffe3"}
{"level":"info","ts":"2026-07-29T03:29:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f229246f9f1c58cace13e248732593f60c48349c724ffaa72678275e34db8dda"}
{"level":"info","ts":"2026-07-29T03:29:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ece92bf393ab7d67b82f4334c69ac4e7292c25ad63cbb753b509af047b4320ca"}
{"level":"info","ts":"2026-07-29T03:29:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/243d597baffc577399accdeef16e98b0b6c58eae0017e8c9cee7e7d19c70f3ce"}
{"level":"info","ts":"2026-07-29T03:29:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b6dbe8e76341abd3d65972a79f08e8f47ad3df94c9c32f2d0912ed76bfbe02af"}
{"level":"info","ts":"2026-07-29T03:29:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ceeffcec6d22a270b460518de80e924fc26c8e1ddff2808503563f9348190fa0"}