--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-10T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"affa82f44d044247a077a5b5928f8e149db4baf44ac17dfd490aab4ffb36e24c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:46:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:46:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["affa82f44d044247a077a5b5928f8e149db4baf44ac17dfd490aab4ffb36e24c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"affa82f44d044247a077a5b5928f8e149db4baf44ac17dfd490aab4ffb36e24c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5470dbdf58d1d72a4a54f5d053ddceb1ed92988da1dcb9451bf1de13b7e82ee6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:46:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:46:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5470dbdf58d1d72a4a54f5d053ddceb1ed92988da1dcb9451bf1de13b7e82ee6"}
{"level":"info","ts":"2026-07-10T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5470dbdf58d1d72a4a54f5d053ddceb1ed92988da1dcb9451bf1de13b7e82ee6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"affa82f44d044247a077a5b5928f8e149db4baf44ac17dfd490aab4ffb36e24c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:46:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:46:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/affa82f44d044247a077a5b5928f8e149db4baf44ac17dfd490aab4ffb36e24c"}
{"level":"info","ts":"2026-07-10T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"affa82f44d044247a077a5b5928f8e149db4baf44ac17dfd490aab4ffb36e24c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5470dbdf58d1d72a4a54f5d053ddceb1ed92988da1dcb9451bf1de13b7e82ee6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"affa82f44d044247a077a5b5928f8e149db4baf44ac17dfd490aab4ffb36e24c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:46:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:46:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["affa82f44d044247a077a5b5928f8e149db4baf44ac17dfd490aab4ffb36e24c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"affa82f44d044247a077a5b5928f8e149db4baf44ac17dfd490aab4ffb36e24c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5470dbdf58d1d72a4a54f5d053ddceb1ed92988da1dcb9451bf1de13b7e82ee6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"affa82f44d044247a077a5b5928f8e149db4baf44ac17dfd490aab4ffb36e24c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:46:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:46:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["affa82f44d044247a077a5b5928f8e149db4baf44ac17dfd490aab4ffb36e24c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"affa82f44d044247a077a5b5928f8e149db4baf44ac17dfd490aab4ffb36e24c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"affa82f44d044247a077a5b5928f8e149db4baf44ac17dfd490aab4ffb36e24c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"affa82f44d044247a077a5b5928f8e149db4baf44ac17dfd490aab4ffb36e24c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"affa82f44d044247a077a5b5928f8e149db4baf44ac17dfd490aab4ffb36e24c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5470dbdf58d1d72a4a54f5d053ddceb1ed92988da1dcb9451bf1de13b7e82ee6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5470dbdf58d1d72a4a54f5d053ddceb1ed92988da1dcb9451bf1de13b7e82ee6"}
{"level":"debug","ts":"2026-07-10T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5470dbdf58d1d72a4a54f5d053ddceb1ed92988da1dcb9451bf1de13b7e82ee6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:46:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:46:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5470dbdf58d1d72a4a54f5d053ddceb1ed92988da1dcb9451bf1de13b7e82ee6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/affa82f44d044247a077a5b5928f8e149db4baf44ac17dfd490aab4ffb36e24c"}
{"level":"info","ts":"2026-07-10T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5470dbdf58d1d72a4a54f5d053ddceb1ed92988da1dcb9451bf1de13b7e82ee6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5470dbdf58d1d72a4a54f5d053ddceb1ed92988da1dcb9451bf1de13b7e82ee6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5470dbdf58d1d72a4a54f5d053ddceb1ed92988da1dcb9451bf1de13b7e82ee6"}
{"level":"debug","ts":"2026-07-10T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfe8d6e15a7ccee7aec7744f80128a9539d211caadff1d6cae59cb80b43aa555","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:47:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:47:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfe8d6e15a7ccee7aec7744f80128a9539d211caadff1d6cae59cb80b43aa555","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfe8d6e15a7ccee7aec7744f80128a9539d211caadff1d6cae59cb80b43aa555","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfe8d6e15a7ccee7aec7744f80128a9539d211caadff1d6cae59cb80b43aa555"}
{"level":"debug","ts":"2026-07-10T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfe8d6e15a7ccee7aec7744f80128a9539d211caadff1d6cae59cb80b43aa555","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfe8d6e15a7ccee7aec7744f80128a9539d211caadff1d6cae59cb80b43aa555","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfe8d6e15a7ccee7aec7744f80128a9539d211caadff1d6cae59cb80b43aa555"}
{"level":"debug","ts":"2026-07-10T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfe8d6e15a7ccee7aec7744f80128a9539d211caadff1d6cae59cb80b43aa555","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:47:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:47:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfe8d6e15a7ccee7aec7744f80128a9539d211caadff1d6cae59cb80b43aa555"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfe8d6e15a7ccee7aec7744f80128a9539d211caadff1d6cae59cb80b43aa555","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7754b618036a13424e485997f4accbcfb1f1ac995939e1f1c17b9707582d1a65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:47:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:47:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7754b618036a13424e485997f4accbcfb1f1ac995939e1f1c17b9707582d1a65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfe8d6e15a7ccee7aec7744f80128a9539d211caadff1d6cae59cb80b43aa555","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7754b618036a13424e485997f4accbcfb1f1ac995939e1f1c17b9707582d1a65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7754b618036a13424e485997f4accbcfb1f1ac995939e1f1c17b9707582d1a65"}
{"level":"debug","ts":"2026-07-10T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7754b618036a13424e485997f4accbcfb1f1ac995939e1f1c17b9707582d1a65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:47:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:47:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7754b618036a13424e485997f4accbcfb1f1ac995939e1f1c17b9707582d1a65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7754b618036a13424e485997f4accbcfb1f1ac995939e1f1c17b9707582d1a65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7754b618036a13424e485997f4accbcfb1f1ac995939e1f1c17b9707582d1a65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfe8d6e15a7ccee7aec7744f80128a9539d211caadff1d6cae59cb80b43aa555"}
{"level":"info","ts":"2026-07-10T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7754b618036a13424e485997f4accbcfb1f1ac995939e1f1c17b9707582d1a65"}
{"level":"debug","ts":"2026-07-10T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61a89a4c4b48c5d5114ee3550e600d33a276115a548e636e94faa131938df008","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:47:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:47:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61a89a4c4b48c5d5114ee3550e600d33a276115a548e636e94faa131938df008","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61a89a4c4b48c5d5114ee3550e600d33a276115a548e636e94faa131938df008","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61a89a4c4b48c5d5114ee3550e600d33a276115a548e636e94faa131938df008","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61a89a4c4b48c5d5114ee3550e600d33a276115a548e636e94faa131938df008"}
{"level":"debug","ts":"2026-07-10T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61a89a4c4b48c5d5114ee3550e600d33a276115a548e636e94faa131938df008","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61a89a4c4b48c5d5114ee3550e600d33a276115a548e636e94faa131938df008"}
{"level":"debug","ts":"2026-07-10T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61a89a4c4b48c5d5114ee3550e600d33a276115a548e636e94faa131938df008","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:47:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:47:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61a89a4c4b48c5d5114ee3550e600d33a276115a548e636e94faa131938df008"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61a89a4c4b48c5d5114ee3550e600d33a276115a548e636e94faa131938df008","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61a89a4c4b48c5d5114ee3550e600d33a276115a548e636e94faa131938df008","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db7112c4685bd68875675617f413b89b1111ca7328a63724e904b88a753514e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:47:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:47:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db7112c4685bd68875675617f413b89b1111ca7328a63724e904b88a753514e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db7112c4685bd68875675617f413b89b1111ca7328a63724e904b88a753514e0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61a89a4c4b48c5d5114ee3550e600d33a276115a548e636e94faa131938df008"}
{"level":"debug","ts":"2026-07-10T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db7112c4685bd68875675617f413b89b1111ca7328a63724e904b88a753514e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:47:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:47:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db7112c4685bd68875675617f413b89b1111ca7328a63724e904b88a753514e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db7112c4685bd68875675617f413b89b1111ca7328a63724e904b88a753514e0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db7112c4685bd68875675617f413b89b1111ca7328a63724e904b88a753514e0"}
{"level":"debug","ts":"2026-07-10T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db7112c4685bd68875675617f413b89b1111ca7328a63724e904b88a753514e0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db7112c4685bd68875675617f413b89b1111ca7328a63724e904b88a753514e0"}
{"level":"debug","ts":"2026-07-10T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db7112c4685bd68875675617f413b89b1111ca7328a63724e904b88a753514e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:47:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:47:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db7112c4685bd68875675617f413b89b1111ca7328a63724e904b88a753514e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db7112c4685bd68875675617f413b89b1111ca7328a63724e904b88a753514e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db7112c4685bd68875675617f413b89b1111ca7328a63724e904b88a753514e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:47:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:47:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db7112c4685bd68875675617f413b89b1111ca7328a63724e904b88a753514e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db7112c4685bd68875675617f413b89b1111ca7328a63724e904b88a753514e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db7112c4685bd68875675617f413b89b1111ca7328a63724e904b88a753514e0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db7112c4685bd68875675617f413b89b1111ca7328a63724e904b88a753514e0"}
{"level":"debug","ts":"2026-07-10T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db7112c4685bd68875675617f413b89b1111ca7328a63724e904b88a753514e0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db7112c4685bd68875675617f413b89b1111ca7328a63724e904b88a753514e0"}
{"level":"debug","ts":"2026-07-10T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db7112c4685bd68875675617f413b89b1111ca7328a63724e904b88a753514e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:47:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:47:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db7112c4685bd68875675617f413b89b1111ca7328a63724e904b88a753514e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db7112c4685bd68875675617f413b89b1111ca7328a63724e904b88a753514e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db7112c4685bd68875675617f413b89b1111ca7328a63724e904b88a753514e0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db7112c4685bd68875675617f413b89b1111ca7328a63724e904b88a753514e0"}
{"level":"info","ts":"2026-07-10T17:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5470dbdf58d1d72a4a54f5d053ddceb1ed92988da1dcb9451bf1de13b7e82ee6"}
{"level":"info","ts":"2026-07-10T17:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/000ebefbe9db7ad5bb90a27c3bc62c899c499501d193f01c47cf996ea40df786"}
{"level":"info","ts":"2026-07-10T17:47:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0a73d3ffb5bc01a177276666fe6fe4888b5b62547a14700cde9c77a4eea3c5c"}
{"level":"info","ts":"2026-07-10T17:47:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/affa82f44d044247a077a5b5928f8e149db4baf44ac17dfd490aab4ffb36e24c"}
{"level":"info","ts":"2026-07-10T17:47:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db7112c4685bd68875675617f413b89b1111ca7328a63724e904b88a753514e0"}
{"level":"info","ts":"2026-07-10T17:47:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/61a89a4c4b48c5d5114ee3550e600d33a276115a548e636e94faa131938df008"}
{"level":"info","ts":"2026-07-10T17:47:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7754b618036a13424e485997f4accbcfb1f1ac995939e1f1c17b9707582d1a65"}
{"level":"info","ts":"2026-07-10T17:47:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bfe8d6e15a7ccee7aec7744f80128a9539d211caadff1d6cae59cb80b43aa555"}
{"level":"debug","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"008ca30ef8515454bb8a919eca711855a84c68aa8d63b596b9f64e4123404b1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"008ca30ef8515454bb8a919eca711855a84c68aa8d63b596b9f64e4123404b1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"008ca30ef8515454bb8a919eca711855a84c68aa8d63b596b9f64e4123404b1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"008ca30ef8515454bb8a919eca711855a84c68aa8d63b596b9f64e4123404b1e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/008ca30ef8515454bb8a919eca711855a84c68aa8d63b596b9f64e4123404b1e"}
{"level":"debug","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"008ca30ef8515454bb8a919eca711855a84c68aa8d63b596b9f64e4123404b1e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/008ca30ef8515454bb8a919eca711855a84c68aa8d63b596b9f64e4123404b1e"}
{"level":"debug","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"008ca30ef8515454bb8a919eca711855a84c68aa8d63b596b9f64e4123404b1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["008ca30ef8515454bb8a919eca711855a84c68aa8d63b596b9f64e4123404b1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"008ca30ef8515454bb8a919eca711855a84c68aa8d63b596b9f64e4123404b1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"008ca30ef8515454bb8a919eca711855a84c68aa8d63b596b9f64e4123404b1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3779258bf0dc19621061db543fb8677fe8e7134438f286ef4c1624f31b32224","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3779258bf0dc19621061db543fb8677fe8e7134438f286ef4c1624f31b32224","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3779258bf0dc19621061db543fb8677fe8e7134438f286ef4c1624f31b32224","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3779258bf0dc19621061db543fb8677fe8e7134438f286ef4c1624f31b32224","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/008ca30ef8515454bb8a919eca711855a84c68aa8d63b596b9f64e4123404b1e"}
{"level":"debug","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3779258bf0dc19621061db543fb8677fe8e7134438f286ef4c1624f31b32224","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3779258bf0dc19621061db543fb8677fe8e7134438f286ef4c1624f31b32224"}
{"level":"info","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3779258bf0dc19621061db543fb8677fe8e7134438f286ef4c1624f31b32224","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3779258bf0dc19621061db543fb8677fe8e7134438f286ef4c1624f31b32224","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3779258bf0dc19621061db543fb8677fe8e7134438f286ef4c1624f31b32224"}
{"level":"debug","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3779258bf0dc19621061db543fb8677fe8e7134438f286ef4c1624f31b32224","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3779258bf0dc19621061db543fb8677fe8e7134438f286ef4c1624f31b32224"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3779258bf0dc19621061db543fb8677fe8e7134438f286ef4c1624f31b32224","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3779258bf0dc19621061db543fb8677fe8e7134438f286ef4c1624f31b32224","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3779258bf0dc19621061db543fb8677fe8e7134438f286ef4c1624f31b32224","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3779258bf0dc19621061db543fb8677fe8e7134438f286ef4c1624f31b32224","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3779258bf0dc19621061db543fb8677fe8e7134438f286ef4c1624f31b32224","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3779258bf0dc19621061db543fb8677fe8e7134438f286ef4c1624f31b32224"}
{"level":"debug","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3779258bf0dc19621061db543fb8677fe8e7134438f286ef4c1624f31b32224","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3779258bf0dc19621061db543fb8677fe8e7134438f286ef4c1624f31b32224"}
{"level":"debug","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3779258bf0dc19621061db543fb8677fe8e7134438f286ef4c1624f31b32224","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3779258bf0dc19621061db543fb8677fe8e7134438f286ef4c1624f31b32224"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3779258bf0dc19621061db543fb8677fe8e7134438f286ef4c1624f31b32224","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3779258bf0dc19621061db543fb8677fe8e7134438f286ef4c1624f31b32224","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3779258bf0dc19621061db543fb8677fe8e7134438f286ef4c1624f31b32224","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48352ac43f93a0ef720e4dbc0544cea25c7523c3bcb5ee74ace8ad736a96a4fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3779258bf0dc19621061db543fb8677fe8e7134438f286ef4c1624f31b32224"}
{"level":"info","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48352ac43f93a0ef720e4dbc0544cea25c7523c3bcb5ee74ace8ad736a96a4fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3779258bf0dc19621061db543fb8677fe8e7134438f286ef4c1624f31b32224","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3779258bf0dc19621061db543fb8677fe8e7134438f286ef4c1624f31b32224"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3779258bf0dc19621061db543fb8677fe8e7134438f286ef4c1624f31b32224","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48352ac43f93a0ef720e4dbc0544cea25c7523c3bcb5ee74ace8ad736a96a4fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48352ac43f93a0ef720e4dbc0544cea25c7523c3bcb5ee74ace8ad736a96a4fc"}
{"level":"info","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48352ac43f93a0ef720e4dbc0544cea25c7523c3bcb5ee74ace8ad736a96a4fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3779258bf0dc19621061db543fb8677fe8e7134438f286ef4c1624f31b32224","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3779258bf0dc19621061db543fb8677fe8e7134438f286ef4c1624f31b32224"}
{"level":"info","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3779258bf0dc19621061db543fb8677fe8e7134438f286ef4c1624f31b32224","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48352ac43f93a0ef720e4dbc0544cea25c7523c3bcb5ee74ace8ad736a96a4fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3779258bf0dc19621061db543fb8677fe8e7134438f286ef4c1624f31b32224","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3779258bf0dc19621061db543fb8677fe8e7134438f286ef4c1624f31b32224"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3779258bf0dc19621061db543fb8677fe8e7134438f286ef4c1624f31b32224","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3779258bf0dc19621061db543fb8677fe8e7134438f286ef4c1624f31b32224","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3779258bf0dc19621061db543fb8677fe8e7134438f286ef4c1624f31b32224"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48352ac43f93a0ef720e4dbc0544cea25c7523c3bcb5ee74ace8ad736a96a4fc"}
{"level":"error","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f3779258bf0dc19621061db543fb8677fe8e7134438f286ef4c1624f31b32224","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f3779258bf0dc19621061db543fb8677fe8e7134438f286ef4c1624f31b32224\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48352ac43f93a0ef720e4dbc0544cea25c7523c3bcb5ee74ace8ad736a96a4fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48352ac43f93a0ef720e4dbc0544cea25c7523c3bcb5ee74ace8ad736a96a4fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48352ac43f93a0ef720e4dbc0544cea25c7523c3bcb5ee74ace8ad736a96a4fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3779258bf0dc19621061db543fb8677fe8e7134438f286ef4c1624f31b32224","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3779258bf0dc19621061db543fb8677fe8e7134438f286ef4c1624f31b32224"}
{"level":"info","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3779258bf0dc19621061db543fb8677fe8e7134438f286ef4c1624f31b32224","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48352ac43f93a0ef720e4dbc0544cea25c7523c3bcb5ee74ace8ad736a96a4fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48352ac43f93a0ef720e4dbc0544cea25c7523c3bcb5ee74ace8ad736a96a4fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3779258bf0dc19621061db543fb8677fe8e7134438f286ef4c1624f31b32224","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3779258bf0dc19621061db543fb8677fe8e7134438f286ef4c1624f31b32224"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48352ac43f93a0ef720e4dbc0544cea25c7523c3bcb5ee74ace8ad736a96a4fc"}
{"level":"info","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3779258bf0dc19621061db543fb8677fe8e7134438f286ef4c1624f31b32224"}
{"level":"info","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3779258bf0dc19621061db543fb8677fe8e7134438f286ef4c1624f31b32224","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48352ac43f93a0ef720e4dbc0544cea25c7523c3bcb5ee74ace8ad736a96a4fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3779258bf0dc19621061db543fb8677fe8e7134438f286ef4c1624f31b32224","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48352ac43f93a0ef720e4dbc0544cea25c7523c3bcb5ee74ace8ad736a96a4fc"}
{"level":"debug","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48352ac43f93a0ef720e4dbc0544cea25c7523c3bcb5ee74ace8ad736a96a4fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48352ac43f93a0ef720e4dbc0544cea25c7523c3bcb5ee74ace8ad736a96a4fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3779258bf0dc19621061db543fb8677fe8e7134438f286ef4c1624f31b32224"}
{"level":"info","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48352ac43f93a0ef720e4dbc0544cea25c7523c3bcb5ee74ace8ad736a96a4fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48352ac43f93a0ef720e4dbc0544cea25c7523c3bcb5ee74ace8ad736a96a4fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48352ac43f93a0ef720e4dbc0544cea25c7523c3bcb5ee74ace8ad736a96a4fc"}
{"level":"info","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48352ac43f93a0ef720e4dbc0544cea25c7523c3bcb5ee74ace8ad736a96a4fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f92d1398519dcd9cfe778ba53bd81b1cd3840b51c31750c4f49a3f3c7b2bb63a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f92d1398519dcd9cfe778ba53bd81b1cd3840b51c31750c4f49a3f3c7b2bb63a"}
{"level":"info","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f92d1398519dcd9cfe778ba53bd81b1cd3840b51c31750c4f49a3f3c7b2bb63a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48352ac43f93a0ef720e4dbc0544cea25c7523c3bcb5ee74ace8ad736a96a4fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f92d1398519dcd9cfe778ba53bd81b1cd3840b51c31750c4f49a3f3c7b2bb63a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f92d1398519dcd9cfe778ba53bd81b1cd3840b51c31750c4f49a3f3c7b2bb63a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48352ac43f93a0ef720e4dbc0544cea25c7523c3bcb5ee74ace8ad736a96a4fc"}
{"level":"info","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f92d1398519dcd9cfe778ba53bd81b1cd3840b51c31750c4f49a3f3c7b2bb63a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48352ac43f93a0ef720e4dbc0544cea25c7523c3bcb5ee74ace8ad736a96a4fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48352ac43f93a0ef720e4dbc0544cea25c7523c3bcb5ee74ace8ad736a96a4fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f92d1398519dcd9cfe778ba53bd81b1cd3840b51c31750c4f49a3f3c7b2bb63a"}
{"level":"info","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48352ac43f93a0ef720e4dbc0544cea25c7523c3bcb5ee74ace8ad736a96a4fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f92d1398519dcd9cfe778ba53bd81b1cd3840b51c31750c4f49a3f3c7b2bb63a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f92d1398519dcd9cfe778ba53bd81b1cd3840b51c31750c4f49a3f3c7b2bb63a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48352ac43f93a0ef720e4dbc0544cea25c7523c3bcb5ee74ace8ad736a96a4fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09884d45d07e1f1ea5a83c86159d936257c1d9a76a34f3c082a0f15fe293c65c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f92d1398519dcd9cfe778ba53bd81b1cd3840b51c31750c4f49a3f3c7b2bb63a"}
{"level":"info","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09884d45d07e1f1ea5a83c86159d936257c1d9a76a34f3c082a0f15fe293c65c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f92d1398519dcd9cfe778ba53bd81b1cd3840b51c31750c4f49a3f3c7b2bb63a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f92d1398519dcd9cfe778ba53bd81b1cd3840b51c31750c4f49a3f3c7b2bb63a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f92d1398519dcd9cfe778ba53bd81b1cd3840b51c31750c4f49a3f3c7b2bb63a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09884d45d07e1f1ea5a83c86159d936257c1d9a76a34f3c082a0f15fe293c65c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f92d1398519dcd9cfe778ba53bd81b1cd3840b51c31750c4f49a3f3c7b2bb63a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09884d45d07e1f1ea5a83c86159d936257c1d9a76a34f3c082a0f15fe293c65c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48352ac43f93a0ef720e4dbc0544cea25c7523c3bcb5ee74ace8ad736a96a4fc"}
{"level":"debug","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09884d45d07e1f1ea5a83c86159d936257c1d9a76a34f3c082a0f15fe293c65c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09884d45d07e1f1ea5a83c86159d936257c1d9a76a34f3c082a0f15fe293c65c"}
{"level":"info","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09884d45d07e1f1ea5a83c86159d936257c1d9a76a34f3c082a0f15fe293c65c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09884d45d07e1f1ea5a83c86159d936257c1d9a76a34f3c082a0f15fe293c65c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:49:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09884d45d07e1f1ea5a83c86159d936257c1d9a76a34f3c082a0f15fe293c65c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09884d45d07e1f1ea5a83c86159d936257c1d9a76a34f3c082a0f15fe293c65c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09884d45d07e1f1ea5a83c86159d936257c1d9a76a34f3c082a0f15fe293c65c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f92d1398519dcd9cfe778ba53bd81b1cd3840b51c31750c4f49a3f3c7b2bb63a"}
{"level":"debug","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09884d45d07e1f1ea5a83c86159d936257c1d9a76a34f3c082a0f15fe293c65c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:49:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:49:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09884d45d07e1f1ea5a83c86159d936257c1d9a76a34f3c082a0f15fe293c65c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09884d45d07e1f1ea5a83c86159d936257c1d9a76a34f3c082a0f15fe293c65c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09884d45d07e1f1ea5a83c86159d936257c1d9a76a34f3c082a0f15fe293c65c"}
{"level":"debug","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09884d45d07e1f1ea5a83c86159d936257c1d9a76a34f3c082a0f15fe293c65c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09884d45d07e1f1ea5a83c86159d936257c1d9a76a34f3c082a0f15fe293c65c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09884d45d07e1f1ea5a83c86159d936257c1d9a76a34f3c082a0f15fe293c65c"}
{"level":"debug","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"666c4064c80564b3583c630ddfa3ef5454d5ff954237f54e34a346468143ba9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:49:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:49:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"666c4064c80564b3583c630ddfa3ef5454d5ff954237f54e34a346468143ba9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09884d45d07e1f1ea5a83c86159d936257c1d9a76a34f3c082a0f15fe293c65c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:49:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:49:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09884d45d07e1f1ea5a83c86159d936257c1d9a76a34f3c082a0f15fe293c65c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09884d45d07e1f1ea5a83c86159d936257c1d9a76a34f3c082a0f15fe293c65c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"666c4064c80564b3583c630ddfa3ef5454d5ff954237f54e34a346468143ba9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09884d45d07e1f1ea5a83c86159d936257c1d9a76a34f3c082a0f15fe293c65c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/666c4064c80564b3583c630ddfa3ef5454d5ff954237f54e34a346468143ba9c"}
{"level":"debug","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"666c4064c80564b3583c630ddfa3ef5454d5ff954237f54e34a346468143ba9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:49:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:49:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["666c4064c80564b3583c630ddfa3ef5454d5ff954237f54e34a346468143ba9c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"666c4064c80564b3583c630ddfa3ef5454d5ff954237f54e34a346468143ba9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"666c4064c80564b3583c630ddfa3ef5454d5ff954237f54e34a346468143ba9c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09884d45d07e1f1ea5a83c86159d936257c1d9a76a34f3c082a0f15fe293c65c"}
{"level":"info","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/666c4064c80564b3583c630ddfa3ef5454d5ff954237f54e34a346468143ba9c"}
{"level":"debug","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c8f7416c59329a72c37fabd55b9fc41f95fe64d5904de6055ce23e4ab09280","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:49:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:49:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55c8f7416c59329a72c37fabd55b9fc41f95fe64d5904de6055ce23e4ab09280","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"916aee1a3ff859ef55a77af0cbf1082e0c235d17dd7b35ca06e3a717987d414e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:49:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:49:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"916aee1a3ff859ef55a77af0cbf1082e0c235d17dd7b35ca06e3a717987d414e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c8f7416c59329a72c37fabd55b9fc41f95fe64d5904de6055ce23e4ab09280","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:49:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:49:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55c8f7416c59329a72c37fabd55b9fc41f95fe64d5904de6055ce23e4ab09280","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"916aee1a3ff859ef55a77af0cbf1082e0c235d17dd7b35ca06e3a717987d414e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55c8f7416c59329a72c37fabd55b9fc41f95fe64d5904de6055ce23e4ab09280","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55c8f7416c59329a72c37fabd55b9fc41f95fe64d5904de6055ce23e4ab09280"}
{"level":"debug","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c8f7416c59329a72c37fabd55b9fc41f95fe64d5904de6055ce23e4ab09280","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:49:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:49:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55c8f7416c59329a72c37fabd55b9fc41f95fe64d5904de6055ce23e4ab09280"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55c8f7416c59329a72c37fabd55b9fc41f95fe64d5904de6055ce23e4ab09280","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"916aee1a3ff859ef55a77af0cbf1082e0c235d17dd7b35ca06e3a717987d414e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:49:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:49:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/916aee1a3ff859ef55a77af0cbf1082e0c235d17dd7b35ca06e3a717987d414e"}
{"level":"info","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"916aee1a3ff859ef55a77af0cbf1082e0c235d17dd7b35ca06e3a717987d414e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c8f7416c59329a72c37fabd55b9fc41f95fe64d5904de6055ce23e4ab09280","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:49:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:49:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55c8f7416c59329a72c37fabd55b9fc41f95fe64d5904de6055ce23e4ab09280","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"916aee1a3ff859ef55a77af0cbf1082e0c235d17dd7b35ca06e3a717987d414e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:49:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:49:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["916aee1a3ff859ef55a77af0cbf1082e0c235d17dd7b35ca06e3a717987d414e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55c8f7416c59329a72c37fabd55b9fc41f95fe64d5904de6055ce23e4ab09280"}
{"level":"info","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"916aee1a3ff859ef55a77af0cbf1082e0c235d17dd7b35ca06e3a717987d414e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"328b55b40af419e19d42320998cdffc47a35f27dc7e955cd40462b3507cd18f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:49:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:49:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/916aee1a3ff859ef55a77af0cbf1082e0c235d17dd7b35ca06e3a717987d414e"}
{"level":"info","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"328b55b40af419e19d42320998cdffc47a35f27dc7e955cd40462b3507cd18f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c8f7416c59329a72c37fabd55b9fc41f95fe64d5904de6055ce23e4ab09280","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:49:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:49:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55c8f7416c59329a72c37fabd55b9fc41f95fe64d5904de6055ce23e4ab09280"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/328b55b40af419e19d42320998cdffc47a35f27dc7e955cd40462b3507cd18f4"}
{"level":"info","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55c8f7416c59329a72c37fabd55b9fc41f95fe64d5904de6055ce23e4ab09280","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e062b325f500aa36912742a244f8a8831ed8218246bc9d4123be64ca9752040a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:49:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:49:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e062b325f500aa36912742a244f8a8831ed8218246bc9d4123be64ca9752040a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"916aee1a3ff859ef55a77af0cbf1082e0c235d17dd7b35ca06e3a717987d414e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fe5cfe714cee1f160623c0fcfc7d499cb3269534ec8423d716891443ee95caa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:49:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:49:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55c8f7416c59329a72c37fabd55b9fc41f95fe64d5904de6055ce23e4ab09280"}
{"level":"info","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fe5cfe714cee1f160623c0fcfc7d499cb3269534ec8423d716891443ee95caa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"328b55b40af419e19d42320998cdffc47a35f27dc7e955cd40462b3507cd18f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:49:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:49:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["328b55b40af419e19d42320998cdffc47a35f27dc7e955cd40462b3507cd18f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"328b55b40af419e19d42320998cdffc47a35f27dc7e955cd40462b3507cd18f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70bff0f96baae2143676d9c0fc28581532add8ec5b2d3900596699566d13afb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:49:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:49:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e062b325f500aa36912742a244f8a8831ed8218246bc9d4123be64ca9752040a"}
{"level":"info","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70bff0f96baae2143676d9c0fc28581532add8ec5b2d3900596699566d13afb8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55c8f7416c59329a72c37fabd55b9fc41f95fe64d5904de6055ce23e4ab09280","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e062b325f500aa36912742a244f8a8831ed8218246bc9d4123be64ca9752040a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:49:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:49:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e062b325f500aa36912742a244f8a8831ed8218246bc9d4123be64ca9752040a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e062b325f500aa36912742a244f8a8831ed8218246bc9d4123be64ca9752040a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fe5cfe714cee1f160623c0fcfc7d499cb3269534ec8423d716891443ee95caa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:49:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:49:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fe5cfe714cee1f160623c0fcfc7d499cb3269534ec8423d716891443ee95caa"}
{"level":"info","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fe5cfe714cee1f160623c0fcfc7d499cb3269534ec8423d716891443ee95caa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"328b55b40af419e19d42320998cdffc47a35f27dc7e955cd40462b3507cd18f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70bff0f96baae2143676d9c0fc28581532add8ec5b2d3900596699566d13afb8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e062b325f500aa36912742a244f8a8831ed8218246bc9d4123be64ca9752040a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fe5cfe714cee1f160623c0fcfc7d499cb3269534ec8423d716891443ee95caa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:49:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:49:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5fe5cfe714cee1f160623c0fcfc7d499cb3269534ec8423d716891443ee95caa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/916aee1a3ff859ef55a77af0cbf1082e0c235d17dd7b35ca06e3a717987d414e"}
{"level":"info","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fe5cfe714cee1f160623c0fcfc7d499cb3269534ec8423d716891443ee95caa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70bff0f96baae2143676d9c0fc28581532add8ec5b2d3900596699566d13afb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:49:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:49:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70bff0f96baae2143676d9c0fc28581532add8ec5b2d3900596699566d13afb8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fe5cfe714cee1f160623c0fcfc7d499cb3269534ec8423d716891443ee95caa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70bff0f96baae2143676d9c0fc28581532add8ec5b2d3900596699566d13afb8"}
{"level":"debug","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70bff0f96baae2143676d9c0fc28581532add8ec5b2d3900596699566d13afb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:49:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:49:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70bff0f96baae2143676d9c0fc28581532add8ec5b2d3900596699566d13afb8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70bff0f96baae2143676d9c0fc28581532add8ec5b2d3900596699566d13afb8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70bff0f96baae2143676d9c0fc28581532add8ec5b2d3900596699566d13afb8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70bff0f96baae2143676d9c0fc28581532add8ec5b2d3900596699566d13afb8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/328b55b40af419e19d42320998cdffc47a35f27dc7e955cd40462b3507cd18f4"}
{"level":"info","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55c8f7416c59329a72c37fabd55b9fc41f95fe64d5904de6055ce23e4ab09280"}
{"level":"info","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e062b325f500aa36912742a244f8a8831ed8218246bc9d4123be64ca9752040a"}
{"level":"info","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fe5cfe714cee1f160623c0fcfc7d499cb3269534ec8423d716891443ee95caa"}
{"level":"info","ts":"2026-07-10T17:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70bff0f96baae2143676d9c0fc28581532add8ec5b2d3900596699566d13afb8"}
{"level":"debug","ts":"2026-07-10T17:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"236cdd641db58fd1b1e3bd9d9335b72cad8ab3ed8614c488874514c0604661cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:49:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:49:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/236cdd641db58fd1b1e3bd9d9335b72cad8ab3ed8614c488874514c0604661cf"}
{"level":"info","ts":"2026-07-10T17:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"236cdd641db58fd1b1e3bd9d9335b72cad8ab3ed8614c488874514c0604661cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"236cdd641db58fd1b1e3bd9d9335b72cad8ab3ed8614c488874514c0604661cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"236cdd641db58fd1b1e3bd9d9335b72cad8ab3ed8614c488874514c0604661cf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/236cdd641db58fd1b1e3bd9d9335b72cad8ab3ed8614c488874514c0604661cf"}
{"level":"debug","ts":"2026-07-10T17:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"236cdd641db58fd1b1e3bd9d9335b72cad8ab3ed8614c488874514c0604661cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:49:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:49:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["236cdd641db58fd1b1e3bd9d9335b72cad8ab3ed8614c488874514c0604661cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"236cdd641db58fd1b1e3bd9d9335b72cad8ab3ed8614c488874514c0604661cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"236cdd641db58fd1b1e3bd9d9335b72cad8ab3ed8614c488874514c0604661cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:49:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:49:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"236cdd641db58fd1b1e3bd9d9335b72cad8ab3ed8614c488874514c0604661cf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/236cdd641db58fd1b1e3bd9d9335b72cad8ab3ed8614c488874514c0604661cf"}
{"level":"debug","ts":"2026-07-10T17:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"236cdd641db58fd1b1e3bd9d9335b72cad8ab3ed8614c488874514c0604661cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"236cdd641db58fd1b1e3bd9d9335b72cad8ab3ed8614c488874514c0604661cf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/236cdd641db58fd1b1e3bd9d9335b72cad8ab3ed8614c488874514c0604661cf"}
{"level":"debug","ts":"2026-07-10T17:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"236cdd641db58fd1b1e3bd9d9335b72cad8ab3ed8614c488874514c0604661cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:49:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:49:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["236cdd641db58fd1b1e3bd9d9335b72cad8ab3ed8614c488874514c0604661cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"236cdd641db58fd1b1e3bd9d9335b72cad8ab3ed8614c488874514c0604661cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"236cdd641db58fd1b1e3bd9d9335b72cad8ab3ed8614c488874514c0604661cf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/236cdd641db58fd1b1e3bd9d9335b72cad8ab3ed8614c488874514c0604661cf"}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ee48386db98fe1d10ddb3627cf68244481bd8ce9fc78a77d1067d14f7e18613","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ee48386db98fe1d10ddb3627cf68244481bd8ce9fc78a77d1067d14f7e18613","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ee48386db98fe1d10ddb3627cf68244481bd8ce9fc78a77d1067d14f7e18613","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ee48386db98fe1d10ddb3627cf68244481bd8ce9fc78a77d1067d14f7e18613","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ee48386db98fe1d10ddb3627cf68244481bd8ce9fc78a77d1067d14f7e18613"}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ee48386db98fe1d10ddb3627cf68244481bd8ce9fc78a77d1067d14f7e18613","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ee48386db98fe1d10ddb3627cf68244481bd8ce9fc78a77d1067d14f7e18613"}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ee48386db98fe1d10ddb3627cf68244481bd8ce9fc78a77d1067d14f7e18613","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ee48386db98fe1d10ddb3627cf68244481bd8ce9fc78a77d1067d14f7e18613"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ee48386db98fe1d10ddb3627cf68244481bd8ce9fc78a77d1067d14f7e18613","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ee48386db98fe1d10ddb3627cf68244481bd8ce9fc78a77d1067d14f7e18613","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"008cca66861f5ad7065ca992f89d454960094afa52da3d05ea52094f1dcdbab0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"008cca66861f5ad7065ca992f89d454960094afa52da3d05ea52094f1dcdbab0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ee48386db98fe1d10ddb3627cf68244481bd8ce9fc78a77d1067d14f7e18613"}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"008cca66861f5ad7065ca992f89d454960094afa52da3d05ea52094f1dcdbab0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"008cca66861f5ad7065ca992f89d454960094afa52da3d05ea52094f1dcdbab0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"008cca66861f5ad7065ca992f89d454960094afa52da3d05ea52094f1dcdbab0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"008cca66861f5ad7065ca992f89d454960094afa52da3d05ea52094f1dcdbab0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"008cca66861f5ad7065ca992f89d454960094afa52da3d05ea52094f1dcdbab0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"008cca66861f5ad7065ca992f89d454960094afa52da3d05ea52094f1dcdbab0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/008cca66861f5ad7065ca992f89d454960094afa52da3d05ea52094f1dcdbab0"}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"008cca66861f5ad7065ca992f89d454960094afa52da3d05ea52094f1dcdbab0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/008cca66861f5ad7065ca992f89d454960094afa52da3d05ea52094f1dcdbab0"}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"008cca66861f5ad7065ca992f89d454960094afa52da3d05ea52094f1dcdbab0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["008cca66861f5ad7065ca992f89d454960094afa52da3d05ea52094f1dcdbab0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"008cca66861f5ad7065ca992f89d454960094afa52da3d05ea52094f1dcdbab0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"008cca66861f5ad7065ca992f89d454960094afa52da3d05ea52094f1dcdbab0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"008cca66861f5ad7065ca992f89d454960094afa52da3d05ea52094f1dcdbab0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"008cca66861f5ad7065ca992f89d454960094afa52da3d05ea52094f1dcdbab0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"008cca66861f5ad7065ca992f89d454960094afa52da3d05ea52094f1dcdbab0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/008cca66861f5ad7065ca992f89d454960094afa52da3d05ea52094f1dcdbab0"}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"008cca66861f5ad7065ca992f89d454960094afa52da3d05ea52094f1dcdbab0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/008cca66861f5ad7065ca992f89d454960094afa52da3d05ea52094f1dcdbab0"}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"008cca66861f5ad7065ca992f89d454960094afa52da3d05ea52094f1dcdbab0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["008cca66861f5ad7065ca992f89d454960094afa52da3d05ea52094f1dcdbab0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"008cca66861f5ad7065ca992f89d454960094afa52da3d05ea52094f1dcdbab0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137"}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"008cca66861f5ad7065ca992f89d454960094afa52da3d05ea52094f1dcdbab0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"008cca66861f5ad7065ca992f89d454960094afa52da3d05ea52094f1dcdbab0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"008cca66861f5ad7065ca992f89d454960094afa52da3d05ea52094f1dcdbab0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/008cca66861f5ad7065ca992f89d454960094afa52da3d05ea52094f1dcdbab0"}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"008cca66861f5ad7065ca992f89d454960094afa52da3d05ea52094f1dcdbab0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["008cca66861f5ad7065ca992f89d454960094afa52da3d05ea52094f1dcdbab0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"008cca66861f5ad7065ca992f89d454960094afa52da3d05ea52094f1dcdbab0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"008cca66861f5ad7065ca992f89d454960094afa52da3d05ea52094f1dcdbab0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137"}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f70904fd9d741c01a9650402f2883c5b96de1699988e089397445bd14afe207f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f70904fd9d741c01a9650402f2883c5b96de1699988e089397445bd14afe207f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f70904fd9d741c01a9650402f2883c5b96de1699988e089397445bd14afe207f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/008cca66861f5ad7065ca992f89d454960094afa52da3d05ea52094f1dcdbab0"}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f70904fd9d741c01a9650402f2883c5b96de1699988e089397445bd14afe207f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f70904fd9d741c01a9650402f2883c5b96de1699988e089397445bd14afe207f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137"}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f70904fd9d741c01a9650402f2883c5b96de1699988e089397445bd14afe207f"}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f70904fd9d741c01a9650402f2883c5b96de1699988e089397445bd14afe207f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f70904fd9d741c01a9650402f2883c5b96de1699988e089397445bd14afe207f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f70904fd9d741c01a9650402f2883c5b96de1699988e089397445bd14afe207f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c37bfccf823dabc8c230345ebbfd518efe23331b8024495f17895dfbaafd1c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c37bfccf823dabc8c230345ebbfd518efe23331b8024495f17895dfbaafd1c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f70904fd9d741c01a9650402f2883c5b96de1699988e089397445bd14afe207f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c37bfccf823dabc8c230345ebbfd518efe23331b8024495f17895dfbaafd1c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c37bfccf823dabc8c230345ebbfd518efe23331b8024495f17895dfbaafd1c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c37bfccf823dabc8c230345ebbfd518efe23331b8024495f17895dfbaafd1c6"}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c37bfccf823dabc8c230345ebbfd518efe23331b8024495f17895dfbaafd1c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c37bfccf823dabc8c230345ebbfd518efe23331b8024495f17895dfbaafd1c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c37bfccf823dabc8c230345ebbfd518efe23331b8024495f17895dfbaafd1c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c37bfccf823dabc8c230345ebbfd518efe23331b8024495f17895dfbaafd1c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f70904fd9d741c01a9650402f2883c5b96de1699988e089397445bd14afe207f"}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c37bfccf823dabc8c230345ebbfd518efe23331b8024495f17895dfbaafd1c6"}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44986b74e95212f14a87fab3f97ef169d106d7c35ffa23704b9149693f3efbda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44986b74e95212f14a87fab3f97ef169d106d7c35ffa23704b9149693f3efbda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44986b74e95212f14a87fab3f97ef169d106d7c35ffa23704b9149693f3efbda"}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44986b74e95212f14a87fab3f97ef169d106d7c35ffa23704b9149693f3efbda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44986b74e95212f14a87fab3f97ef169d106d7c35ffa23704b9149693f3efbda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44986b74e95212f14a87fab3f97ef169d106d7c35ffa23704b9149693f3efbda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97ea06d3657f8369031d6669e4272ee1e0e61f0c60db3e0d66579b68f0aaad6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5"}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97ea06d3657f8369031d6669e4272ee1e0e61f0c60db3e0d66579b68f0aaad6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44986b74e95212f14a87fab3f97ef169d106d7c35ffa23704b9149693f3efbda"}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e49d1830106dd17774362b919fc87393cdd06130726a1a2b6b4a51ff564d4161","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e49d1830106dd17774362b919fc87393cdd06130726a1a2b6b4a51ff564d4161","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44986b74e95212f14a87fab3f97ef169d106d7c35ffa23704b9149693f3efbda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97ea06d3657f8369031d6669e4272ee1e0e61f0c60db3e0d66579b68f0aaad6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97ea06d3657f8369031d6669e4272ee1e0e61f0c60db3e0d66579b68f0aaad6b"}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97ea06d3657f8369031d6669e4272ee1e0e61f0c60db3e0d66579b68f0aaad6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e49d1830106dd17774362b919fc87393cdd06130726a1a2b6b4a51ff564d4161","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e49d1830106dd17774362b919fc87393cdd06130726a1a2b6b4a51ff564d4161","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97ea06d3657f8369031d6669e4272ee1e0e61f0c60db3e0d66579b68f0aaad6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97ea06d3657f8369031d6669e4272ee1e0e61f0c60db3e0d66579b68f0aaad6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e49d1830106dd17774362b919fc87393cdd06130726a1a2b6b4a51ff564d4161"}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97ea06d3657f8369031d6669e4272ee1e0e61f0c60db3e0d66579b68f0aaad6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ceb438cf585d970f7968221b30fe6777160a1a34e9272308b1643d6ad964c536","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ceb438cf585d970f7968221b30fe6777160a1a34e9272308b1643d6ad964c536","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e49d1830106dd17774362b919fc87393cdd06130726a1a2b6b4a51ff564d4161","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e49d1830106dd17774362b919fc87393cdd06130726a1a2b6b4a51ff564d4161"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5"}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e49d1830106dd17774362b919fc87393cdd06130726a1a2b6b4a51ff564d4161","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40f9199b19d686f9a20747c91ab97d146da98618974d967a1c5d077997f2ceb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97ea06d3657f8369031d6669e4272ee1e0e61f0c60db3e0d66579b68f0aaad6b"}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40f9199b19d686f9a20747c91ab97d146da98618974d967a1c5d077997f2ceb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97ea06d3657f8369031d6669e4272ee1e0e61f0c60db3e0d66579b68f0aaad6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ceb438cf585d970f7968221b30fe6777160a1a34e9272308b1643d6ad964c536","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ceb438cf585d970f7968221b30fe6777160a1a34e9272308b1643d6ad964c536"}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ceb438cf585d970f7968221b30fe6777160a1a34e9272308b1643d6ad964c536","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e49d1830106dd17774362b919fc87393cdd06130726a1a2b6b4a51ff564d4161","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e49d1830106dd17774362b919fc87393cdd06130726a1a2b6b4a51ff564d4161"}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e49d1830106dd17774362b919fc87393cdd06130726a1a2b6b4a51ff564d4161","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40f9199b19d686f9a20747c91ab97d146da98618974d967a1c5d077997f2ceb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40f9199b19d686f9a20747c91ab97d146da98618974d967a1c5d077997f2ceb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ceb438cf585d970f7968221b30fe6777160a1a34e9272308b1643d6ad964c536","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ceb438cf585d970f7968221b30fe6777160a1a34e9272308b1643d6ad964c536"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40f9199b19d686f9a20747c91ab97d146da98618974d967a1c5d077997f2ceb6"}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ceb438cf585d970f7968221b30fe6777160a1a34e9272308b1643d6ad964c536","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e49d1830106dd17774362b919fc87393cdd06130726a1a2b6b4a51ff564d4161","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e49d1830106dd17774362b919fc87393cdd06130726a1a2b6b4a51ff564d4161"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e49d1830106dd17774362b919fc87393cdd06130726a1a2b6b4a51ff564d4161","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40f9199b19d686f9a20747c91ab97d146da98618974d967a1c5d077997f2ceb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40f9199b19d686f9a20747c91ab97d146da98618974d967a1c5d077997f2ceb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ceb438cf585d970f7968221b30fe6777160a1a34e9272308b1643d6ad964c536"}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40f9199b19d686f9a20747c91ab97d146da98618974d967a1c5d077997f2ceb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ceb438cf585d970f7968221b30fe6777160a1a34e9272308b1643d6ad964c536","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e49d1830106dd17774362b919fc87393cdd06130726a1a2b6b4a51ff564d4161","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e49d1830106dd17774362b919fc87393cdd06130726a1a2b6b4a51ff564d4161"}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e49d1830106dd17774362b919fc87393cdd06130726a1a2b6b4a51ff564d4161","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40f9199b19d686f9a20747c91ab97d146da98618974d967a1c5d077997f2ceb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40f9199b19d686f9a20747c91ab97d146da98618974d967a1c5d077997f2ceb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e49d1830106dd17774362b919fc87393cdd06130726a1a2b6b4a51ff564d4161","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:49:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e49d1830106dd17774362b919fc87393cdd06130726a1a2b6b4a51ff564d4161"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40f9199b19d686f9a20747c91ab97d146da98618974d967a1c5d077997f2ceb6"}
{"level":"info","ts":"2026-07-10T17:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e49d1830106dd17774362b919fc87393cdd06130726a1a2b6b4a51ff564d4161","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40f9199b19d686f9a20747c91ab97d146da98618974d967a1c5d077997f2ceb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:49:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:49:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40f9199b19d686f9a20747c91ab97d146da98618974d967a1c5d077997f2ceb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40f9199b19d686f9a20747c91ab97d146da98618974d967a1c5d077997f2ceb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e49d1830106dd17774362b919fc87393cdd06130726a1a2b6b4a51ff564d4161","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40f9199b19d686f9a20747c91ab97d146da98618974d967a1c5d077997f2ceb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ceb438cf585d970f7968221b30fe6777160a1a34e9272308b1643d6ad964c536"}
{"level":"info","ts":"2026-07-10T17:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e49d1830106dd17774362b919fc87393cdd06130726a1a2b6b4a51ff564d4161"}
{"level":"info","ts":"2026-07-10T17:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40f9199b19d686f9a20747c91ab97d146da98618974d967a1c5d077997f2ceb6"}
{"level":"info","ts":"2026-07-10T17:49:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe02637f-5074-4f42-94ef-779fc4a2f283","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:33584","PortSpecifier":{"PortValue":33584}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fe02637f-5074-4f42-94ef-779fc4a2f283","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:49:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe02637f-5074-4f42-94ef-779fc4a2f283","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:33584","PortSpecifier":{"PortValue":33584}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783705769,"nanos":929356018},"http":{"id":"fe02637f-5074-4f42-94ef-779fc4a2f283","method":"POST","headers":{":authority":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:49:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fe02637f-5074-4f42-94ef-779fc4a2f283","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T17:49:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fe02637f-5074-4f42-94ef-779fc4a2f283","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3e01e4b4-81fa-44f6-acfe-5e63bab66066","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7eaac46e-c3e2-4f3a-8cb3-07e472cf6884"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bddae96f0fc5"]}}
{"level":"debug","ts":"2026-07-10T17:49:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fe02637f-5074-4f42-94ef-779fc4a2f283","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bddae96f0fc5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7eaac46e-c3e2-4f3a-8cb3-07e472cf6884"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3e01e4b4-81fa-44f6-acfe-5e63bab66066","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5fe5cfe714cee1f160623c0fcfc7d499cb3269534ec8423d716891443ee95caa"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:49:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe02637f-5074-4f42-94ef-779fc4a2f283","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:49:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe02637f-5074-4f42-94ef-779fc4a2f283","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:49:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe02637f-5074-4f42-94ef-779fc4a2f283","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3beb3b/auth-test-model-3beb3b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:49:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fe02637f-5074-4f42-94ef-779fc4a2f283","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T17:49:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe02637f-5074-4f42-94ef-779fc4a2f283","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T17:49:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe02637f-5074-4f42-94ef-779fc4a2f283","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T17:49:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe02637f-5074-4f42-94ef-779fc4a2f283","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:49:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe02637f-5074-4f42-94ef-779fc4a2f283","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:49:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04bf4801-50fe-43fd-b4ca-e54c0d16b481","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:56992","PortSpecifier":{"PortValue":56992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"04bf4801-50fe-43fd-b4ca-e54c0d16b481","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-9f66f0.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:49:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04bf4801-50fe-43fd-b4ca-e54c0d16b481","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:56992","PortSpecifier":{"PortValue":56992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783705769,"nanos":991825230},"http":{"id":"04bf4801-50fe-43fd-b4ca-e54c0d16b481","method":"POST","headers":{":authority":"e2e-shared-b-9f66f0.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:49:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"04bf4801-50fe-43fd-b4ca-e54c0d16b481","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T17:49:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"04bf4801-50fe-43fd-b4ca-e54c0d16b481","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3e01e4b4-81fa-44f6-acfe-5e63bab66066","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7eaac46e-c3e2-4f3a-8cb3-07e472cf6884"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bddae96f0fc5"]}}
{"level":"debug","ts":"2026-07-10T17:49:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"04bf4801-50fe-43fd-b4ca-e54c0d16b481","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bddae96f0fc5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7eaac46e-c3e2-4f3a-8cb3-07e472cf6884"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3e01e4b4-81fa-44f6-acfe-5e63bab66066","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-9f66f0.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:49:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04bf4801-50fe-43fd-b4ca-e54c0d16b481","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:49:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04bf4801-50fe-43fd-b4ca-e54c0d16b481","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:49:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04bf4801-50fe-43fd-b4ca-e54c0d16b481","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-9f66f0/auth-test-model-9f66f0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:49:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"04bf4801-50fe-43fd-b4ca-e54c0d16b481","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T17:49:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04bf4801-50fe-43fd-b4ca-e54c0d16b481","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:49:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04bf4801-50fe-43fd-b4ca-e54c0d16b481","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T17:49:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04bf4801-50fe-43fd-b4ca-e54c0d16b481","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:49:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04bf4801-50fe-43fd-b4ca-e54c0d16b481","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:49:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f948c07-d189-4e5b-80f2-3df487d5a32b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:33598","PortSpecifier":{"PortValue":33598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3f948c07-d189-4e5b-80f2-3df487d5a32b","method":"GET","path":"/maas-api/v1/api-keys/5c8a25c3-1afc-41e5-b298-6fe498b54124","host":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:49:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f948c07-d189-4e5b-80f2-3df487d5a32b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:33598","PortSpecifier":{"PortValue":33598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783705770,"nanos":73542658},"http":{"id":"3f948c07-d189-4e5b-80f2-3df487d5a32b","method":"GET","headers":{":authority":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5c8a25c3-1afc-41e5-b298-6fe498b54124",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:49:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3f948c07-d189-4e5b-80f2-3df487d5a32b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T17:49:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3f948c07-d189-4e5b-80f2-3df487d5a32b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3e01e4b4-81fa-44f6-acfe-5e63bab66066","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7eaac46e-c3e2-4f3a-8cb3-07e472cf6884"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bddae96f0fc5"]}}
{"level":"debug","ts":"2026-07-10T17:49:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3f948c07-d189-4e5b-80f2-3df487d5a32b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bddae96f0fc5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7eaac46e-c3e2-4f3a-8cb3-07e472cf6884"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3e01e4b4-81fa-44f6-acfe-5e63bab66066","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5fe5cfe714cee1f160623c0fcfc7d499cb3269534ec8423d716891443ee95caa"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5c8a25c3-1afc-41e5-b298-6fe498b54124",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:49:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f948c07-d189-4e5b-80f2-3df487d5a32b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:49:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f948c07-d189-4e5b-80f2-3df487d5a32b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:49:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f948c07-d189-4e5b-80f2-3df487d5a32b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3beb3b/auth-test-model-3beb3b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:49:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3f948c07-d189-4e5b-80f2-3df487d5a32b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T17:49:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f948c07-d189-4e5b-80f2-3df487d5a32b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:49:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f948c07-d189-4e5b-80f2-3df487d5a32b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T17:49:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f948c07-d189-4e5b-80f2-3df487d5a32b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:49:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f948c07-d189-4e5b-80f2-3df487d5a32b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:49:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21b945bf-116e-4e8d-bae4-bd4e95409c57","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:57006","PortSpecifier":{"PortValue":57006}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"21b945bf-116e-4e8d-bae4-bd4e95409c57","method":"GET","path":"/maas-api/v1/api-keys/c11f3fdf-4197-494a-b256-0e41fb4eb75d","host":"e2e-shared-b-9f66f0.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:49:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21b945bf-116e-4e8d-bae4-bd4e95409c57","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:57006","PortSpecifier":{"PortValue":57006}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783705770,"nanos":130948852},"http":{"id":"21b945bf-116e-4e8d-bae4-bd4e95409c57","method":"GET","headers":{":authority":"e2e-shared-b-9f66f0.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c11f3fdf-4197-494a-b256-0e41fb4eb75d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:49:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"21b945bf-116e-4e8d-bae4-bd4e95409c57","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T17:49:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"21b945bf-116e-4e8d-bae4-bd4e95409c57","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3e01e4b4-81fa-44f6-acfe-5e63bab66066","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7eaac46e-c3e2-4f3a-8cb3-07e472cf6884"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bddae96f0fc5"]}}
{"level":"debug","ts":"2026-07-10T17:49:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"21b945bf-116e-4e8d-bae4-bd4e95409c57","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bddae96f0fc5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7eaac46e-c3e2-4f3a-8cb3-07e472cf6884"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3e01e4b4-81fa-44f6-acfe-5e63bab66066","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-9f66f0.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c11f3fdf-4197-494a-b256-0e41fb4eb75d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:49:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21b945bf-116e-4e8d-bae4-bd4e95409c57","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:49:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21b945bf-116e-4e8d-bae4-bd4e95409c57","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:49:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21b945bf-116e-4e8d-bae4-bd4e95409c57","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-9f66f0/auth-test-model-9f66f0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:49:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"21b945bf-116e-4e8d-bae4-bd4e95409c57","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T17:49:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21b945bf-116e-4e8d-bae4-bd4e95409c57","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:49:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21b945bf-116e-4e8d-bae4-bd4e95409c57","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T17:49:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21b945bf-116e-4e8d-bae4-bd4e95409c57","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:49:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21b945bf-116e-4e8d-bae4-bd4e95409c57","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:49:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65e5abe3-bc1f-4c87-bb5a-ac323a95672a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:54466","PortSpecifier":{"PortValue":54466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"65e5abe3-bc1f-4c87-bb5a-ac323a95672a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:49:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65e5abe3-bc1f-4c87-bb5a-ac323a95672a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:54466","PortSpecifier":{"PortValue":54466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783705787,"nanos":270193197},"http":{"id":"65e5abe3-bc1f-4c87-bb5a-ac323a95672a","method":"POST","headers":{":authority":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:49:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"65e5abe3-bc1f-4c87-bb5a-ac323a95672a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T17:49:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"65e5abe3-bc1f-4c87-bb5a-ac323a95672a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3e01e4b4-81fa-44f6-acfe-5e63bab66066","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7eaac46e-c3e2-4f3a-8cb3-07e472cf6884"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bddae96f0fc5"]}}
{"level":"debug","ts":"2026-07-10T17:49:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"65e5abe3-bc1f-4c87-bb5a-ac323a95672a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bddae96f0fc5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7eaac46e-c3e2-4f3a-8cb3-07e472cf6884"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3e01e4b4-81fa-44f6-acfe-5e63bab66066","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5fe5cfe714cee1f160623c0fcfc7d499cb3269534ec8423d716891443ee95caa"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:49:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65e5abe3-bc1f-4c87-bb5a-ac323a95672a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:49:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65e5abe3-bc1f-4c87-bb5a-ac323a95672a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:49:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65e5abe3-bc1f-4c87-bb5a-ac323a95672a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3beb3b/auth-test-model-3beb3b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:49:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"65e5abe3-bc1f-4c87-bb5a-ac323a95672a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T17:49:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65e5abe3-bc1f-4c87-bb5a-ac323a95672a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:49:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65e5abe3-bc1f-4c87-bb5a-ac323a95672a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T17:49:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65e5abe3-bc1f-4c87-bb5a-ac323a95672a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:49:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65e5abe3-bc1f-4c87-bb5a-ac323a95672a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:49:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69e61b77-8c04-4d51-b20a-91e9344c5ce4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:58052","PortSpecifier":{"PortValue":58052}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"69e61b77-8c04-4d51-b20a-91e9344c5ce4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-9f66f0.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:49:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69e61b77-8c04-4d51-b20a-91e9344c5ce4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:58052","PortSpecifier":{"PortValue":58052}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783705787,"nanos":312449214},"http":{"id":"69e61b77-8c04-4d51-b20a-91e9344c5ce4","method":"POST","headers":{":authority":"e2e-shared-b-9f66f0.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:49:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"69e61b77-8c04-4d51-b20a-91e9344c5ce4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T17:49:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"69e61b77-8c04-4d51-b20a-91e9344c5ce4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3e01e4b4-81fa-44f6-acfe-5e63bab66066","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7eaac46e-c3e2-4f3a-8cb3-07e472cf6884"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bddae96f0fc5"]}}
{"level":"debug","ts":"2026-07-10T17:49:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"69e61b77-8c04-4d51-b20a-91e9344c5ce4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bddae96f0fc5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7eaac46e-c3e2-4f3a-8cb3-07e472cf6884"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3e01e4b4-81fa-44f6-acfe-5e63bab66066","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-9f66f0.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:49:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69e61b77-8c04-4d51-b20a-91e9344c5ce4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:49:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69e61b77-8c04-4d51-b20a-91e9344c5ce4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:49:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69e61b77-8c04-4d51-b20a-91e9344c5ce4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-9f66f0/auth-test-model-9f66f0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:49:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"69e61b77-8c04-4d51-b20a-91e9344c5ce4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T17:49:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69e61b77-8c04-4d51-b20a-91e9344c5ce4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T17:49:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69e61b77-8c04-4d51-b20a-91e9344c5ce4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T17:49:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69e61b77-8c04-4d51-b20a-91e9344c5ce4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:49:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69e61b77-8c04-4d51-b20a-91e9344c5ce4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:49:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1c484697-369b-4d4e-a04e-0a17ef2c5037","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:54478","PortSpecifier":{"PortValue":54478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1c484697-369b-4d4e-a04e-0a17ef2c5037","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:49:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1c484697-369b-4d4e-a04e-0a17ef2c5037","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:54478","PortSpecifier":{"PortValue":54478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783705787,"nanos":352968786},"http":{"id":"1c484697-369b-4d4e-a04e-0a17ef2c5037","method":"GET","headers":{":authority":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:49:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1c484697-369b-4d4e-a04e-0a17ef2c5037","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-SiCQ1BwRbeybp9Of_iaTJjBDagxqEVbEJAuHY7BVmvsbUg0g6znZOrE5FPEW"}
{"level":"debug","ts":"2026-07-10T17:49:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1c484697-369b-4d4e-a04e-0a17ef2c5037","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-SiCQ1BwRbeybp9Of_iaTJjBDagxqEVbEJAuHY7BVmvsbUg0g6znZOrE5FPEW\"}"}
{"level":"debug","ts":"2026-07-10T17:49:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1c484697-369b-4d4e-a04e-0a17ef2c5037","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e234c111-80e4-4d55-99ba-aaa01b4c4b54","keyName":"e2e-auth-iso-a-bee402","subscription":"e2e-auth-iso-d16dfe","tenant":"e2e-shared-a-3beb3b","userId":"e234c111-80e4-4d55-99ba-aaa01b4c4b54","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T17:49:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1c484697-369b-4d4e-a04e-0a17ef2c5037","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:49:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c484697-369b-4d4e-a04e-0a17ef2c5037","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:49:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c484697-369b-4d4e-a04e-0a17ef2c5037","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:49:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c484697-369b-4d4e-a04e-0a17ef2c5037","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3beb3b/auth-test-model-3beb3b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:49:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1c484697-369b-4d4e-a04e-0a17ef2c5037","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T17:49:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c484697-369b-4d4e-a04e-0a17ef2c5037","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:49:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c484697-369b-4d4e-a04e-0a17ef2c5037","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-d16dfe"}
{"level":"debug","ts":"2026-07-10T17:49:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c484697-369b-4d4e-a04e-0a17ef2c5037","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T17:49:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1c484697-369b-4d4e-a04e-0a17ef2c5037","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:49:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1c484697-369b-4d4e-a04e-0a17ef2c5037","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:50:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5834e8fa-c9d8-46fc-87bd-884219a30711","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:32920","PortSpecifier":{"PortValue":32920}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5834e8fa-c9d8-46fc-87bd-884219a30711","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:50:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5834e8fa-c9d8-46fc-87bd-884219a30711","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:32920","PortSpecifier":{"PortValue":32920}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783705804,"nanos":393652998},"http":{"id":"5834e8fa-c9d8-46fc-87bd-884219a30711","method":"POST","headers":{":authority":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:50:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5834e8fa-c9d8-46fc-87bd-884219a30711","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T17:50:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5834e8fa-c9d8-46fc-87bd-884219a30711","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3e01e4b4-81fa-44f6-acfe-5e63bab66066","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7eaac46e-c3e2-4f3a-8cb3-07e472cf6884"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bddae96f0fc5"]}}
{"level":"debug","ts":"2026-07-10T17:50:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5834e8fa-c9d8-46fc-87bd-884219a30711","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bddae96f0fc5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7eaac46e-c3e2-4f3a-8cb3-07e472cf6884"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3e01e4b4-81fa-44f6-acfe-5e63bab66066","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5fe5cfe714cee1f160623c0fcfc7d499cb3269534ec8423d716891443ee95caa"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:50:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5834e8fa-c9d8-46fc-87bd-884219a30711","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:50:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5834e8fa-c9d8-46fc-87bd-884219a30711","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:50:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5834e8fa-c9d8-46fc-87bd-884219a30711","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3beb3b/auth-test-model-3beb3b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:50:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5834e8fa-c9d8-46fc-87bd-884219a30711","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T17:50:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5834e8fa-c9d8-46fc-87bd-884219a30711","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:50:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5834e8fa-c9d8-46fc-87bd-884219a30711","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T17:50:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5834e8fa-c9d8-46fc-87bd-884219a30711","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:50:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5834e8fa-c9d8-46fc-87bd-884219a30711","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:50:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0f6a7d0c-6ce1-4c05-8453-8c0e226e9d6a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:60354","PortSpecifier":{"PortValue":60354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0f6a7d0c-6ce1-4c05-8453-8c0e226e9d6a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-9f66f0.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:50:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0f6a7d0c-6ce1-4c05-8453-8c0e226e9d6a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:60354","PortSpecifier":{"PortValue":60354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783705804,"nanos":429896475},"http":{"id":"0f6a7d0c-6ce1-4c05-8453-8c0e226e9d6a","method":"POST","headers":{":authority":"e2e-shared-b-9f66f0.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:50:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0f6a7d0c-6ce1-4c05-8453-8c0e226e9d6a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T17:50:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0f6a7d0c-6ce1-4c05-8453-8c0e226e9d6a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3e01e4b4-81fa-44f6-acfe-5e63bab66066","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7eaac46e-c3e2-4f3a-8cb3-07e472cf6884"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bddae96f0fc5"]}}
{"level":"debug","ts":"2026-07-10T17:50:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0f6a7d0c-6ce1-4c05-8453-8c0e226e9d6a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bddae96f0fc5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7eaac46e-c3e2-4f3a-8cb3-07e472cf6884"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3e01e4b4-81fa-44f6-acfe-5e63bab66066","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-9f66f0.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:50:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f6a7d0c-6ce1-4c05-8453-8c0e226e9d6a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:50:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f6a7d0c-6ce1-4c05-8453-8c0e226e9d6a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:50:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f6a7d0c-6ce1-4c05-8453-8c0e226e9d6a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-9f66f0/auth-test-model-9f66f0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:50:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0f6a7d0c-6ce1-4c05-8453-8c0e226e9d6a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T17:50:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f6a7d0c-6ce1-4c05-8453-8c0e226e9d6a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T17:50:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f6a7d0c-6ce1-4c05-8453-8c0e226e9d6a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T17:50:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0f6a7d0c-6ce1-4c05-8453-8c0e226e9d6a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:50:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0f6a7d0c-6ce1-4c05-8453-8c0e226e9d6a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:50:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d4865bf2-f7cd-4995-84bf-85ebb86f8b5d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:60370","PortSpecifier":{"PortValue":60370}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d4865bf2-f7cd-4995-84bf-85ebb86f8b5d","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-9f66f0.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:50:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d4865bf2-f7cd-4995-84bf-85ebb86f8b5d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:60370","PortSpecifier":{"PortValue":60370}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783705804,"nanos":460257551},"http":{"id":"d4865bf2-f7cd-4995-84bf-85ebb86f8b5d","method":"GET","headers":{":authority":"e2e-shared-b-9f66f0.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:50:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d4865bf2-f7cd-4995-84bf-85ebb86f8b5d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-WhGzOfnl16U3Opx0_Th6nj4Ok9MrL1XwAgKujCyyWJi3gObgoieVcNgFvWg5"}
{"level":"debug","ts":"2026-07-10T17:50:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d4865bf2-f7cd-4995-84bf-85ebb86f8b5d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-9f66f0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-WhGzOfnl16U3Opx0_Th6nj4Ok9MrL1XwAgKujCyyWJi3gObgoieVcNgFvWg5\"}"}
{"level":"debug","ts":"2026-07-10T17:50:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d4865bf2-f7cd-4995-84bf-85ebb86f8b5d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-9f66f0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-10T17:50:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d4865bf2-f7cd-4995-84bf-85ebb86f8b5d","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-9f66f0.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:50:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4865bf2-f7cd-4995-84bf-85ebb86f8b5d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:50:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"d4865bf2-f7cd-4995-84bf-85ebb86f8b5d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-10T17:50:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d4865bf2-f7cd-4995-84bf-85ebb86f8b5d","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-10T17:50:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d4865bf2-f7cd-4995-84bf-85ebb86f8b5d","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-10T17:50:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89adc191-f93b-4b2e-bbd3-dc5bfbad76a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:44524","PortSpecifier":{"PortValue":44524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"89adc191-f93b-4b2e-bbd3-dc5bfbad76a9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:50:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89adc191-f93b-4b2e-bbd3-dc5bfbad76a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:44524","PortSpecifier":{"PortValue":44524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783705821,"nanos":471731442},"http":{"id":"89adc191-f93b-4b2e-bbd3-dc5bfbad76a9","method":"POST","headers":{":authority":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:50:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"89adc191-f93b-4b2e-bbd3-dc5bfbad76a9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T17:50:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"89adc191-f93b-4b2e-bbd3-dc5bfbad76a9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3e01e4b4-81fa-44f6-acfe-5e63bab66066","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7eaac46e-c3e2-4f3a-8cb3-07e472cf6884"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bddae96f0fc5"]}}
{"level":"debug","ts":"2026-07-10T17:50:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"89adc191-f93b-4b2e-bbd3-dc5bfbad76a9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bddae96f0fc5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7eaac46e-c3e2-4f3a-8cb3-07e472cf6884"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3e01e4b4-81fa-44f6-acfe-5e63bab66066","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5fe5cfe714cee1f160623c0fcfc7d499cb3269534ec8423d716891443ee95caa"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:50:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89adc191-f93b-4b2e-bbd3-dc5bfbad76a9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:50:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89adc191-f93b-4b2e-bbd3-dc5bfbad76a9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:50:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89adc191-f93b-4b2e-bbd3-dc5bfbad76a9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3beb3b/auth-test-model-3beb3b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:50:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"89adc191-f93b-4b2e-bbd3-dc5bfbad76a9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T17:50:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89adc191-f93b-4b2e-bbd3-dc5bfbad76a9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:50:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89adc191-f93b-4b2e-bbd3-dc5bfbad76a9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T17:50:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89adc191-f93b-4b2e-bbd3-dc5bfbad76a9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:50:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89adc191-f93b-4b2e-bbd3-dc5bfbad76a9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:50:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d0cd2b1b-74f0-40de-9625-261b3914ad18","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:34080","PortSpecifier":{"PortValue":34080}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d0cd2b1b-74f0-40de-9625-261b3914ad18","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-9f66f0.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:50:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d0cd2b1b-74f0-40de-9625-261b3914ad18","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:34080","PortSpecifier":{"PortValue":34080}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783705821,"nanos":513485743},"http":{"id":"d0cd2b1b-74f0-40de-9625-261b3914ad18","method":"POST","headers":{":authority":"e2e-shared-b-9f66f0.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:50:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d0cd2b1b-74f0-40de-9625-261b3914ad18","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T17:50:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d0cd2b1b-74f0-40de-9625-261b3914ad18","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3e01e4b4-81fa-44f6-acfe-5e63bab66066","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7eaac46e-c3e2-4f3a-8cb3-07e472cf6884"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bddae96f0fc5"]}}
{"level":"debug","ts":"2026-07-10T17:50:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d0cd2b1b-74f0-40de-9625-261b3914ad18","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bddae96f0fc5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7eaac46e-c3e2-4f3a-8cb3-07e472cf6884"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3e01e4b4-81fa-44f6-acfe-5e63bab66066","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-9f66f0.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:50:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0cd2b1b-74f0-40de-9625-261b3914ad18","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:50:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0cd2b1b-74f0-40de-9625-261b3914ad18","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:50:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0cd2b1b-74f0-40de-9625-261b3914ad18","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-9f66f0/auth-test-model-9f66f0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:50:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d0cd2b1b-74f0-40de-9625-261b3914ad18","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T17:50:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d0cd2b1b-74f0-40de-9625-261b3914ad18","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T17:50:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d0cd2b1b-74f0-40de-9625-261b3914ad18","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T17:50:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d0cd2b1b-74f0-40de-9625-261b3914ad18","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:50:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d0cd2b1b-74f0-40de-9625-261b3914ad18","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:50:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e74ed992-1365-4bb9-b555-edcd165bb37d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:44536","PortSpecifier":{"PortValue":44536}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e74ed992-1365-4bb9-b555-edcd165bb37d","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:50:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e74ed992-1365-4bb9-b555-edcd165bb37d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:44536","PortSpecifier":{"PortValue":44536}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783705821,"nanos":560491854},"http":{"id":"e74ed992-1365-4bb9-b555-edcd165bb37d","method":"POST","headers":{":authority":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:50:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e74ed992-1365-4bb9-b555-edcd165bb37d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T17:50:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e74ed992-1365-4bb9-b555-edcd165bb37d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3e01e4b4-81fa-44f6-acfe-5e63bab66066","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7eaac46e-c3e2-4f3a-8cb3-07e472cf6884"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bddae96f0fc5"]}}
{"level":"debug","ts":"2026-07-10T17:50:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e74ed992-1365-4bb9-b555-edcd165bb37d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bddae96f0fc5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7eaac46e-c3e2-4f3a-8cb3-07e472cf6884"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3e01e4b4-81fa-44f6-acfe-5e63bab66066","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5fe5cfe714cee1f160623c0fcfc7d499cb3269534ec8423d716891443ee95caa"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:50:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e74ed992-1365-4bb9-b555-edcd165bb37d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:50:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e74ed992-1365-4bb9-b555-edcd165bb37d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:50:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e74ed992-1365-4bb9-b555-edcd165bb37d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3beb3b/auth-test-model-3beb3b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:50:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e74ed992-1365-4bb9-b555-edcd165bb37d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T17:50:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e74ed992-1365-4bb9-b555-edcd165bb37d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:50:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e74ed992-1365-4bb9-b555-edcd165bb37d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T17:50:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e74ed992-1365-4bb9-b555-edcd165bb37d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:50:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e74ed992-1365-4bb9-b555-edcd165bb37d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:50:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d644ac46-9378-42d2-acfa-162659e339ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:34082","PortSpecifier":{"PortValue":34082}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d644ac46-9378-42d2-acfa-162659e339ca","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-9f66f0.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:50:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d644ac46-9378-42d2-acfa-162659e339ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:34082","PortSpecifier":{"PortValue":34082}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783705821,"nanos":597744945},"http":{"id":"d644ac46-9378-42d2-acfa-162659e339ca","method":"POST","headers":{":authority":"e2e-shared-b-9f66f0.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:50:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d644ac46-9378-42d2-acfa-162659e339ca","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T17:50:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d644ac46-9378-42d2-acfa-162659e339ca","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3e01e4b4-81fa-44f6-acfe-5e63bab66066","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7eaac46e-c3e2-4f3a-8cb3-07e472cf6884"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bddae96f0fc5"]}}
{"level":"debug","ts":"2026-07-10T17:50:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d644ac46-9378-42d2-acfa-162659e339ca","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bddae96f0fc5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7eaac46e-c3e2-4f3a-8cb3-07e472cf6884"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3e01e4b4-81fa-44f6-acfe-5e63bab66066","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-9f66f0.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:50:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d644ac46-9378-42d2-acfa-162659e339ca","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:50:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d644ac46-9378-42d2-acfa-162659e339ca","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:50:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d644ac46-9378-42d2-acfa-162659e339ca","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-9f66f0/auth-test-model-9f66f0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:50:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d644ac46-9378-42d2-acfa-162659e339ca","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T17:50:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d644ac46-9378-42d2-acfa-162659e339ca","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T17:50:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d644ac46-9378-42d2-acfa-162659e339ca","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T17:50:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d644ac46-9378-42d2-acfa-162659e339ca","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:50:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d644ac46-9378-42d2-acfa-162659e339ca","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:50:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f532ba5d-828f-4849-a1a0-b1608aea3d58","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:47226","PortSpecifier":{"PortValue":47226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f532ba5d-828f-4849-a1a0-b1608aea3d58","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:50:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f532ba5d-828f-4849-a1a0-b1608aea3d58","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:47226","PortSpecifier":{"PortValue":47226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783705845,"nanos":826806249},"http":{"id":"f532ba5d-828f-4849-a1a0-b1608aea3d58","method":"POST","headers":{":authority":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:50:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f532ba5d-828f-4849-a1a0-b1608aea3d58","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T17:50:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f532ba5d-828f-4849-a1a0-b1608aea3d58","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3e01e4b4-81fa-44f6-acfe-5e63bab66066","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7eaac46e-c3e2-4f3a-8cb3-07e472cf6884"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bddae96f0fc5"]}}
{"level":"debug","ts":"2026-07-10T17:50:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f532ba5d-828f-4849-a1a0-b1608aea3d58","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bddae96f0fc5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7eaac46e-c3e2-4f3a-8cb3-07e472cf6884"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3e01e4b4-81fa-44f6-acfe-5e63bab66066","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5fe5cfe714cee1f160623c0fcfc7d499cb3269534ec8423d716891443ee95caa"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:50:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f532ba5d-828f-4849-a1a0-b1608aea3d58","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:50:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f532ba5d-828f-4849-a1a0-b1608aea3d58","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:50:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f532ba5d-828f-4849-a1a0-b1608aea3d58","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3beb3b/auth-test-model-3beb3b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:50:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f532ba5d-828f-4849-a1a0-b1608aea3d58","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T17:50:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f532ba5d-828f-4849-a1a0-b1608aea3d58","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:50:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f532ba5d-828f-4849-a1a0-b1608aea3d58","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T17:50:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f532ba5d-828f-4849-a1a0-b1608aea3d58","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:50:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f532ba5d-828f-4849-a1a0-b1608aea3d58","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:50:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3888bb60-2ece-4132-9eb4-f2f290e59ee2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:37348","PortSpecifier":{"PortValue":37348}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3888bb60-2ece-4132-9eb4-f2f290e59ee2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-9f66f0.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:50:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3888bb60-2ece-4132-9eb4-f2f290e59ee2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:37348","PortSpecifier":{"PortValue":37348}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783705845,"nanos":859511116},"http":{"id":"3888bb60-2ece-4132-9eb4-f2f290e59ee2","method":"POST","headers":{":authority":"e2e-shared-b-9f66f0.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:50:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3888bb60-2ece-4132-9eb4-f2f290e59ee2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T17:50:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3888bb60-2ece-4132-9eb4-f2f290e59ee2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3e01e4b4-81fa-44f6-acfe-5e63bab66066","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7eaac46e-c3e2-4f3a-8cb3-07e472cf6884"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bddae96f0fc5"]}}
{"level":"debug","ts":"2026-07-10T17:50:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3888bb60-2ece-4132-9eb4-f2f290e59ee2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bddae96f0fc5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7eaac46e-c3e2-4f3a-8cb3-07e472cf6884"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3e01e4b4-81fa-44f6-acfe-5e63bab66066","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-9f66f0.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:50:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3888bb60-2ece-4132-9eb4-f2f290e59ee2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:50:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3888bb60-2ece-4132-9eb4-f2f290e59ee2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:50:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3888bb60-2ece-4132-9eb4-f2f290e59ee2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-9f66f0/auth-test-model-9f66f0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:50:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3888bb60-2ece-4132-9eb4-f2f290e59ee2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T17:50:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3888bb60-2ece-4132-9eb4-f2f290e59ee2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T17:50:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3888bb60-2ece-4132-9eb4-f2f290e59ee2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T17:50:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3888bb60-2ece-4132-9eb4-f2f290e59ee2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:50:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3888bb60-2ece-4132-9eb4-f2f290e59ee2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:50:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c43ffd2-5386-4579-9e25-e9e3b34d02e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:37362","PortSpecifier":{"PortValue":37362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6c43ffd2-5386-4579-9e25-e9e3b34d02e1","method":"GET","path":"/maas-api/v1/api-keys/29fc1083-0840-456c-86ee-066ae82d3129","host":"e2e-shared-b-9f66f0.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:50:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c43ffd2-5386-4579-9e25-e9e3b34d02e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:37362","PortSpecifier":{"PortValue":37362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783705845,"nanos":898042145},"http":{"id":"6c43ffd2-5386-4579-9e25-e9e3b34d02e1","method":"GET","headers":{":authority":"e2e-shared-b-9f66f0.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/29fc1083-0840-456c-86ee-066ae82d3129",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:50:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6c43ffd2-5386-4579-9e25-e9e3b34d02e1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T17:50:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6c43ffd2-5386-4579-9e25-e9e3b34d02e1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3e01e4b4-81fa-44f6-acfe-5e63bab66066","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7eaac46e-c3e2-4f3a-8cb3-07e472cf6884"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bddae96f0fc5"]}}
{"level":"debug","ts":"2026-07-10T17:50:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6c43ffd2-5386-4579-9e25-e9e3b34d02e1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bddae96f0fc5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7eaac46e-c3e2-4f3a-8cb3-07e472cf6884"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3e01e4b4-81fa-44f6-acfe-5e63bab66066","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-9f66f0.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/29fc1083-0840-456c-86ee-066ae82d3129",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:50:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c43ffd2-5386-4579-9e25-e9e3b34d02e1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:50:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c43ffd2-5386-4579-9e25-e9e3b34d02e1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:50:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c43ffd2-5386-4579-9e25-e9e3b34d02e1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-9f66f0/auth-test-model-9f66f0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:50:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6c43ffd2-5386-4579-9e25-e9e3b34d02e1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T17:50:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c43ffd2-5386-4579-9e25-e9e3b34d02e1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T17:50:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c43ffd2-5386-4579-9e25-e9e3b34d02e1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T17:50:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c43ffd2-5386-4579-9e25-e9e3b34d02e1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:50:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c43ffd2-5386-4579-9e25-e9e3b34d02e1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:50:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c84687b4-de0e-4d16-9f8d-a6cfa93588dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:47234","PortSpecifier":{"PortValue":47234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c84687b4-de0e-4d16-9f8d-a6cfa93588dd","method":"GET","path":"/maas-api/v1/api-keys/29fc1083-0840-456c-86ee-066ae82d3129","host":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:50:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c84687b4-de0e-4d16-9f8d-a6cfa93588dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:47234","PortSpecifier":{"PortValue":47234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783705845,"nanos":929358957},"http":{"id":"c84687b4-de0e-4d16-9f8d-a6cfa93588dd","method":"GET","headers":{":authority":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/29fc1083-0840-456c-86ee-066ae82d3129",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:50:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c84687b4-de0e-4d16-9f8d-a6cfa93588dd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T17:50:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c84687b4-de0e-4d16-9f8d-a6cfa93588dd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3e01e4b4-81fa-44f6-acfe-5e63bab66066","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7eaac46e-c3e2-4f3a-8cb3-07e472cf6884"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bddae96f0fc5"]}}
{"level":"debug","ts":"2026-07-10T17:50:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c84687b4-de0e-4d16-9f8d-a6cfa93588dd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bddae96f0fc5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7eaac46e-c3e2-4f3a-8cb3-07e472cf6884"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3e01e4b4-81fa-44f6-acfe-5e63bab66066","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5fe5cfe714cee1f160623c0fcfc7d499cb3269534ec8423d716891443ee95caa"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/29fc1083-0840-456c-86ee-066ae82d3129",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:50:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c84687b4-de0e-4d16-9f8d-a6cfa93588dd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:50:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c84687b4-de0e-4d16-9f8d-a6cfa93588dd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:50:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c84687b4-de0e-4d16-9f8d-a6cfa93588dd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3beb3b/auth-test-model-3beb3b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:50:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c84687b4-de0e-4d16-9f8d-a6cfa93588dd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T17:50:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c84687b4-de0e-4d16-9f8d-a6cfa93588dd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T17:50:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c84687b4-de0e-4d16-9f8d-a6cfa93588dd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T17:50:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c84687b4-de0e-4d16-9f8d-a6cfa93588dd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:50:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c84687b4-de0e-4d16-9f8d-a6cfa93588dd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:51:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05e56f6f-5163-4410-bb24-a646985a59c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:57202","PortSpecifier":{"PortValue":57202}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"05e56f6f-5163-4410-bb24-a646985a59c0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:51:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05e56f6f-5163-4410-bb24-a646985a59c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:57202","PortSpecifier":{"PortValue":57202}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783705865,"nanos":69364279},"http":{"id":"05e56f6f-5163-4410-bb24-a646985a59c0","method":"POST","headers":{":authority":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:51:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"05e56f6f-5163-4410-bb24-a646985a59c0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T17:51:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"05e56f6f-5163-4410-bb24-a646985a59c0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3e01e4b4-81fa-44f6-acfe-5e63bab66066","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7eaac46e-c3e2-4f3a-8cb3-07e472cf6884"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bddae96f0fc5"]}}
{"level":"debug","ts":"2026-07-10T17:51:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"05e56f6f-5163-4410-bb24-a646985a59c0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bddae96f0fc5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7eaac46e-c3e2-4f3a-8cb3-07e472cf6884"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3e01e4b4-81fa-44f6-acfe-5e63bab66066","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5fe5cfe714cee1f160623c0fcfc7d499cb3269534ec8423d716891443ee95caa"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:51:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05e56f6f-5163-4410-bb24-a646985a59c0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:51:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05e56f6f-5163-4410-bb24-a646985a59c0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:51:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05e56f6f-5163-4410-bb24-a646985a59c0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3beb3b/auth-test-model-3beb3b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:51:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"05e56f6f-5163-4410-bb24-a646985a59c0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T17:51:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05e56f6f-5163-4410-bb24-a646985a59c0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:51:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05e56f6f-5163-4410-bb24-a646985a59c0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T17:51:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05e56f6f-5163-4410-bb24-a646985a59c0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:51:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05e56f6f-5163-4410-bb24-a646985a59c0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:51:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d659a64-9d58-4957-af0e-8ce854e45aac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:55402","PortSpecifier":{"PortValue":55402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3d659a64-9d58-4957-af0e-8ce854e45aac","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-9f66f0.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:51:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d659a64-9d58-4957-af0e-8ce854e45aac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:55402","PortSpecifier":{"PortValue":55402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783705865,"nanos":103614351},"http":{"id":"3d659a64-9d58-4957-af0e-8ce854e45aac","method":"POST","headers":{":authority":"e2e-shared-b-9f66f0.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:51:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3d659a64-9d58-4957-af0e-8ce854e45aac","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T17:51:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3d659a64-9d58-4957-af0e-8ce854e45aac","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3e01e4b4-81fa-44f6-acfe-5e63bab66066","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7eaac46e-c3e2-4f3a-8cb3-07e472cf6884"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bddae96f0fc5"]}}
{"level":"debug","ts":"2026-07-10T17:51:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3d659a64-9d58-4957-af0e-8ce854e45aac","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bddae96f0fc5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7eaac46e-c3e2-4f3a-8cb3-07e472cf6884"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3e01e4b4-81fa-44f6-acfe-5e63bab66066","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-9f66f0.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:51:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d659a64-9d58-4957-af0e-8ce854e45aac","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:51:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d659a64-9d58-4957-af0e-8ce854e45aac","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:51:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d659a64-9d58-4957-af0e-8ce854e45aac","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-9f66f0/auth-test-model-9f66f0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:51:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3d659a64-9d58-4957-af0e-8ce854e45aac","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T17:51:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d659a64-9d58-4957-af0e-8ce854e45aac","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:51:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d659a64-9d58-4957-af0e-8ce854e45aac","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T17:51:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d659a64-9d58-4957-af0e-8ce854e45aac","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:51:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d659a64-9d58-4957-af0e-8ce854e45aac","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:51:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9002f0c5-b8f2-4526-9cef-ba39ae493884","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:57214","PortSpecifier":{"PortValue":57214}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9002f0c5-b8f2-4526-9cef-ba39ae493884","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:51:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9002f0c5-b8f2-4526-9cef-ba39ae493884","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:57214","PortSpecifier":{"PortValue":57214}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783705865,"nanos":152550720},"http":{"id":"9002f0c5-b8f2-4526-9cef-ba39ae493884","method":"POST","headers":{":authority":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:51:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9002f0c5-b8f2-4526-9cef-ba39ae493884","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1F156s9ZeMnL2eImx_KVatAif7cvbp2rXktZZ3ZQBwXf7wPlWCqzTRHNT9kys"}
{"level":"debug","ts":"2026-07-10T17:51:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9002f0c5-b8f2-4526-9cef-ba39ae493884","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1F156s9ZeMnL2eImx_KVatAif7cvbp2rXktZZ3ZQBwXf7wPlWCqzTRHNT9kys\"}"}
{"level":"debug","ts":"2026-07-10T17:51:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9002f0c5-b8f2-4526-9cef-ba39ae493884","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ebefb9cd-271d-4d97-a9c4-479da92009b4","keyName":"e2e-auth-iso-a-842927","subscription":"e2e-auth-iso-ab502b","tenant":"e2e-shared-a-3beb3b","userId":"ebefb9cd-271d-4d97-a9c4-479da92009b4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T17:51:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9002f0c5-b8f2-4526-9cef-ba39ae493884","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:51:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9002f0c5-b8f2-4526-9cef-ba39ae493884","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:51:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9002f0c5-b8f2-4526-9cef-ba39ae493884","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:51:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9002f0c5-b8f2-4526-9cef-ba39ae493884","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3beb3b/auth-test-model-3beb3b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:51:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9002f0c5-b8f2-4526-9cef-ba39ae493884","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T17:51:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9002f0c5-b8f2-4526-9cef-ba39ae493884","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-ab502b"}
{"level":"debug","ts":"2026-07-10T17:51:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9002f0c5-b8f2-4526-9cef-ba39ae493884","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:51:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9002f0c5-b8f2-4526-9cef-ba39ae493884","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T17:51:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9002f0c5-b8f2-4526-9cef-ba39ae493884","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:51:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9002f0c5-b8f2-4526-9cef-ba39ae493884","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:51:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f92d1398519dcd9cfe778ba53bd81b1cd3840b51c31750c4f49a3f3c7b2bb63a"}
{"level":"info","ts":"2026-07-10T17:51:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/09884d45d07e1f1ea5a83c86159d936257c1d9a76a34f3c082a0f15fe293c65c"}
{"level":"info","ts":"2026-07-10T17:51:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e062b325f500aa36912742a244f8a8831ed8218246bc9d4123be64ca9752040a"}
{"level":"info","ts":"2026-07-10T17:51:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55c8f7416c59329a72c37fabd55b9fc41f95fe64d5904de6055ce23e4ab09280"}
{"level":"info","ts":"2026-07-10T17:51:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/916aee1a3ff859ef55a77af0cbf1082e0c235d17dd7b35ca06e3a717987d414e"}
{"level":"info","ts":"2026-07-10T17:51:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/008ca30ef8515454bb8a919eca711855a84c68aa8d63b596b9f64e4123404b1e"}
{"level":"info","ts":"2026-07-10T17:51:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f3779258bf0dc19621061db543fb8677fe8e7134438f286ef4c1624f31b32224"}
{"level":"info","ts":"2026-07-10T17:51:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/328b55b40af419e19d42320998cdffc47a35f27dc7e955cd40462b3507cd18f4"}
{"level":"debug","ts":"2026-07-10T17:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d932ce3fb0bb79576455d28029bec920f857a89cf4522d00339a09cee43675cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:51:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:51:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d932ce3fb0bb79576455d28029bec920f857a89cf4522d00339a09cee43675cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d932ce3fb0bb79576455d28029bec920f857a89cf4522d00339a09cee43675cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d932ce3fb0bb79576455d28029bec920f857a89cf4522d00339a09cee43675cf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d932ce3fb0bb79576455d28029bec920f857a89cf4522d00339a09cee43675cf"}
{"level":"debug","ts":"2026-07-10T17:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d932ce3fb0bb79576455d28029bec920f857a89cf4522d00339a09cee43675cf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d932ce3fb0bb79576455d28029bec920f857a89cf4522d00339a09cee43675cf"}
{"level":"debug","ts":"2026-07-10T17:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d932ce3fb0bb79576455d28029bec920f857a89cf4522d00339a09cee43675cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:51:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:51:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d932ce3fb0bb79576455d28029bec920f857a89cf4522d00339a09cee43675cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d932ce3fb0bb79576455d28029bec920f857a89cf4522d00339a09cee43675cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd90da802c1749ca99ee03854d024088b1a862e40c1a93421698e4f05e66f094","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:51:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:51:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd90da802c1749ca99ee03854d024088b1a862e40c1a93421698e4f05e66f094","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d932ce3fb0bb79576455d28029bec920f857a89cf4522d00339a09cee43675cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd90da802c1749ca99ee03854d024088b1a862e40c1a93421698e4f05e66f094","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd90da802c1749ca99ee03854d024088b1a862e40c1a93421698e4f05e66f094","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd90da802c1749ca99ee03854d024088b1a862e40c1a93421698e4f05e66f094"}
{"level":"debug","ts":"2026-07-10T17:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd90da802c1749ca99ee03854d024088b1a862e40c1a93421698e4f05e66f094","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:51:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:51:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd90da802c1749ca99ee03854d024088b1a862e40c1a93421698e4f05e66f094"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d932ce3fb0bb79576455d28029bec920f857a89cf4522d00339a09cee43675cf"}
{"level":"info","ts":"2026-07-10T17:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd90da802c1749ca99ee03854d024088b1a862e40c1a93421698e4f05e66f094","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd90da802c1749ca99ee03854d024088b1a862e40c1a93421698e4f05e66f094","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:51:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:51:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd90da802c1749ca99ee03854d024088b1a862e40c1a93421698e4f05e66f094"}
{"level":"info","ts":"2026-07-10T17:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd90da802c1749ca99ee03854d024088b1a862e40c1a93421698e4f05e66f094","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd90da802c1749ca99ee03854d024088b1a862e40c1a93421698e4f05e66f094","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd90da802c1749ca99ee03854d024088b1a862e40c1a93421698e4f05e66f094","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd90da802c1749ca99ee03854d024088b1a862e40c1a93421698e4f05e66f094"}
{"level":"debug","ts":"2026-07-10T17:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd90da802c1749ca99ee03854d024088b1a862e40c1a93421698e4f05e66f094","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd90da802c1749ca99ee03854d024088b1a862e40c1a93421698e4f05e66f094"}
{"level":"debug","ts":"2026-07-10T17:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd90da802c1749ca99ee03854d024088b1a862e40c1a93421698e4f05e66f094","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:51:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:51:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd90da802c1749ca99ee03854d024088b1a862e40c1a93421698e4f05e66f094"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd90da802c1749ca99ee03854d024088b1a862e40c1a93421698e4f05e66f094","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd90da802c1749ca99ee03854d024088b1a862e40c1a93421698e4f05e66f094","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:51:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:51:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd90da802c1749ca99ee03854d024088b1a862e40c1a93421698e4f05e66f094","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd90da802c1749ca99ee03854d024088b1a862e40c1a93421698e4f05e66f094","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd90da802c1749ca99ee03854d024088b1a862e40c1a93421698e4f05e66f094","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd90da802c1749ca99ee03854d024088b1a862e40c1a93421698e4f05e66f094"}
{"level":"debug","ts":"2026-07-10T17:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd90da802c1749ca99ee03854d024088b1a862e40c1a93421698e4f05e66f094","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd90da802c1749ca99ee03854d024088b1a862e40c1a93421698e4f05e66f094"}
{"level":"debug","ts":"2026-07-10T17:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd90da802c1749ca99ee03854d024088b1a862e40c1a93421698e4f05e66f094","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:51:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:51:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd90da802c1749ca99ee03854d024088b1a862e40c1a93421698e4f05e66f094"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd90da802c1749ca99ee03854d024088b1a862e40c1a93421698e4f05e66f094","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd90da802c1749ca99ee03854d024088b1a862e40c1a93421698e4f05e66f094","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd90da802c1749ca99ee03854d024088b1a862e40c1a93421698e4f05e66f094"}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70d59a4b44c1122669955572431dd7c5e379112fd82294115ce38240b28100bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70d59a4b44c1122669955572431dd7c5e379112fd82294115ce38240b28100bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70d59a4b44c1122669955572431dd7c5e379112fd82294115ce38240b28100bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70d59a4b44c1122669955572431dd7c5e379112fd82294115ce38240b28100bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70d59a4b44c1122669955572431dd7c5e379112fd82294115ce38240b28100bf"}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70d59a4b44c1122669955572431dd7c5e379112fd82294115ce38240b28100bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70d59a4b44c1122669955572431dd7c5e379112fd82294115ce38240b28100bf"}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70d59a4b44c1122669955572431dd7c5e379112fd82294115ce38240b28100bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70d59a4b44c1122669955572431dd7c5e379112fd82294115ce38240b28100bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70d59a4b44c1122669955572431dd7c5e379112fd82294115ce38240b28100bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70d59a4b44c1122669955572431dd7c5e379112fd82294115ce38240b28100bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70d59a4b44c1122669955572431dd7c5e379112fd82294115ce38240b28100bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70d59a4b44c1122669955572431dd7c5e379112fd82294115ce38240b28100bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70d59a4b44c1122669955572431dd7c5e379112fd82294115ce38240b28100bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70d59a4b44c1122669955572431dd7c5e379112fd82294115ce38240b28100bf"}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70d59a4b44c1122669955572431dd7c5e379112fd82294115ce38240b28100bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70d59a4b44c1122669955572431dd7c5e379112fd82294115ce38240b28100bf"}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70d59a4b44c1122669955572431dd7c5e379112fd82294115ce38240b28100bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70d59a4b44c1122669955572431dd7c5e379112fd82294115ce38240b28100bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70d59a4b44c1122669955572431dd7c5e379112fd82294115ce38240b28100bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70d59a4b44c1122669955572431dd7c5e379112fd82294115ce38240b28100bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca6a0f9d9ef276e924533254c5c4f88e7cc3fde1a9f19eddde7c8a0e9b05cdd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca6a0f9d9ef276e924533254c5c4f88e7cc3fde1a9f19eddde7c8a0e9b05cdd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca6a0f9d9ef276e924533254c5c4f88e7cc3fde1a9f19eddde7c8a0e9b05cdd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca6a0f9d9ef276e924533254c5c4f88e7cc3fde1a9f19eddde7c8a0e9b05cdd3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70d59a4b44c1122669955572431dd7c5e379112fd82294115ce38240b28100bf"}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca6a0f9d9ef276e924533254c5c4f88e7cc3fde1a9f19eddde7c8a0e9b05cdd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca6a0f9d9ef276e924533254c5c4f88e7cc3fde1a9f19eddde7c8a0e9b05cdd3"}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca6a0f9d9ef276e924533254c5c4f88e7cc3fde1a9f19eddde7c8a0e9b05cdd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca6a0f9d9ef276e924533254c5c4f88e7cc3fde1a9f19eddde7c8a0e9b05cdd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca6a0f9d9ef276e924533254c5c4f88e7cc3fde1a9f19eddde7c8a0e9b05cdd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca6a0f9d9ef276e924533254c5c4f88e7cc3fde1a9f19eddde7c8a0e9b05cdd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca6a0f9d9ef276e924533254c5c4f88e7cc3fde1a9f19eddde7c8a0e9b05cdd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca6a0f9d9ef276e924533254c5c4f88e7cc3fde1a9f19eddde7c8a0e9b05cdd3"}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca6a0f9d9ef276e924533254c5c4f88e7cc3fde1a9f19eddde7c8a0e9b05cdd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca6a0f9d9ef276e924533254c5c4f88e7cc3fde1a9f19eddde7c8a0e9b05cdd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca6a0f9d9ef276e924533254c5c4f88e7cc3fde1a9f19eddde7c8a0e9b05cdd3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca6a0f9d9ef276e924533254c5c4f88e7cc3fde1a9f19eddde7c8a0e9b05cdd3"}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca6a0f9d9ef276e924533254c5c4f88e7cc3fde1a9f19eddde7c8a0e9b05cdd3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca6a0f9d9ef276e924533254c5c4f88e7cc3fde1a9f19eddde7c8a0e9b05cdd3"}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca6a0f9d9ef276e924533254c5c4f88e7cc3fde1a9f19eddde7c8a0e9b05cdd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca6a0f9d9ef276e924533254c5c4f88e7cc3fde1a9f19eddde7c8a0e9b05cdd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca6a0f9d9ef276e924533254c5c4f88e7cc3fde1a9f19eddde7c8a0e9b05cdd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca6a0f9d9ef276e924533254c5c4f88e7cc3fde1a9f19eddde7c8a0e9b05cdd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca6a0f9d9ef276e924533254c5c4f88e7cc3fde1a9f19eddde7c8a0e9b05cdd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca6a0f9d9ef276e924533254c5c4f88e7cc3fde1a9f19eddde7c8a0e9b05cdd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca6a0f9d9ef276e924533254c5c4f88e7cc3fde1a9f19eddde7c8a0e9b05cdd3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca6a0f9d9ef276e924533254c5c4f88e7cc3fde1a9f19eddde7c8a0e9b05cdd3"}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53411c5219e93f038ab01ee004cf352e3d8d10848b5991a86e956adb44d84c4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53411c5219e93f038ab01ee004cf352e3d8d10848b5991a86e956adb44d84c4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca6a0f9d9ef276e924533254c5c4f88e7cc3fde1a9f19eddde7c8a0e9b05cdd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53411c5219e93f038ab01ee004cf352e3d8d10848b5991a86e956adb44d84c4d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca6a0f9d9ef276e924533254c5c4f88e7cc3fde1a9f19eddde7c8a0e9b05cdd3"}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53411c5219e93f038ab01ee004cf352e3d8d10848b5991a86e956adb44d84c4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53411c5219e93f038ab01ee004cf352e3d8d10848b5991a86e956adb44d84c4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53411c5219e93f038ab01ee004cf352e3d8d10848b5991a86e956adb44d84c4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca6a0f9d9ef276e924533254c5c4f88e7cc3fde1a9f19eddde7c8a0e9b05cdd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca6a0f9d9ef276e924533254c5c4f88e7cc3fde1a9f19eddde7c8a0e9b05cdd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53411c5219e93f038ab01ee004cf352e3d8d10848b5991a86e956adb44d84c4d"}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca6a0f9d9ef276e924533254c5c4f88e7cc3fde1a9f19eddde7c8a0e9b05cdd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53411c5219e93f038ab01ee004cf352e3d8d10848b5991a86e956adb44d84c4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca6a0f9d9ef276e924533254c5c4f88e7cc3fde1a9f19eddde7c8a0e9b05cdd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"681c05b2cb3acb7c7865217a30f0e10e011a2c984fb04cb89cd3adfc2ff29154","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53411c5219e93f038ab01ee004cf352e3d8d10848b5991a86e956adb44d84c4d"}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"681c05b2cb3acb7c7865217a30f0e10e011a2c984fb04cb89cd3adfc2ff29154","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"681c05b2cb3acb7c7865217a30f0e10e011a2c984fb04cb89cd3adfc2ff29154","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"681c05b2cb3acb7c7865217a30f0e10e011a2c984fb04cb89cd3adfc2ff29154","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca6a0f9d9ef276e924533254c5c4f88e7cc3fde1a9f19eddde7c8a0e9b05cdd3"}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"681c05b2cb3acb7c7865217a30f0e10e011a2c984fb04cb89cd3adfc2ff29154","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"681c05b2cb3acb7c7865217a30f0e10e011a2c984fb04cb89cd3adfc2ff29154","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/681c05b2cb3acb7c7865217a30f0e10e011a2c984fb04cb89cd3adfc2ff29154"}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"681c05b2cb3acb7c7865217a30f0e10e011a2c984fb04cb89cd3adfc2ff29154","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53411c5219e93f038ab01ee004cf352e3d8d10848b5991a86e956adb44d84c4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53411c5219e93f038ab01ee004cf352e3d8d10848b5991a86e956adb44d84c4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53411c5219e93f038ab01ee004cf352e3d8d10848b5991a86e956adb44d84c4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53411c5219e93f038ab01ee004cf352e3d8d10848b5991a86e956adb44d84c4d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/681c05b2cb3acb7c7865217a30f0e10e011a2c984fb04cb89cd3adfc2ff29154"}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"681c05b2cb3acb7c7865217a30f0e10e011a2c984fb04cb89cd3adfc2ff29154","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["681c05b2cb3acb7c7865217a30f0e10e011a2c984fb04cb89cd3adfc2ff29154"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53411c5219e93f038ab01ee004cf352e3d8d10848b5991a86e956adb44d84c4d"}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"681c05b2cb3acb7c7865217a30f0e10e011a2c984fb04cb89cd3adfc2ff29154","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"681c05b2cb3acb7c7865217a30f0e10e011a2c984fb04cb89cd3adfc2ff29154","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468"}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/681c05b2cb3acb7c7865217a30f0e10e011a2c984fb04cb89cd3adfc2ff29154"}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468"}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468"}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c3b08df6ea021a48293314ae84da66c77dd8bec8b8971a08e97ed54ff2dfb0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c3b08df6ea021a48293314ae84da66c77dd8bec8b8971a08e97ed54ff2dfb0c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c3b08df6ea021a48293314ae84da66c77dd8bec8b8971a08e97ed54ff2dfb0c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c3b08df6ea021a48293314ae84da66c77dd8bec8b8971a08e97ed54ff2dfb0c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468"}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c3b08df6ea021a48293314ae84da66c77dd8bec8b8971a08e97ed54ff2dfb0c"}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c3b08df6ea021a48293314ae84da66c77dd8bec8b8971a08e97ed54ff2dfb0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c3b08df6ea021a48293314ae84da66c77dd8bec8b8971a08e97ed54ff2dfb0c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c3b08df6ea021a48293314ae84da66c77dd8bec8b8971a08e97ed54ff2dfb0c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c3b08df6ea021a48293314ae84da66c77dd8bec8b8971a08e97ed54ff2dfb0c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468"}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c3b08df6ea021a48293314ae84da66c77dd8bec8b8971a08e97ed54ff2dfb0c"}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468"}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3ee48386db98fe1d10ddb3627cf68244481bd8ce9fc78a77d1067d14f7e18613"}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/40f9199b19d686f9a20747c91ab97d146da98618974d967a1c5d077997f2ceb6"}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468"}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468"}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/97ea06d3657f8369031d6669e4272ee1e0e61f0c60db3e0d66579b68f0aaad6b"}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/236cdd641db58fd1b1e3bd9d9335b72cad8ab3ed8614c488874514c0604661cf"}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c37bfccf823dabc8c230345ebbfd518efe23331b8024495f17895dfbaafd1c6"}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:51:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468"}
{"level":"debug","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468"}
{"level":"debug","ts":"2026-07-10T17:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:51:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:51:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f70904fd9d741c01a9650402f2883c5b96de1699988e089397445bd14afe207f"}
{"level":"info","ts":"2026-07-10T17:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ceb438cf585d970f7968221b30fe6777160a1a34e9272308b1643d6ad964c536"}
{"level":"info","ts":"2026-07-10T17:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:51:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:51:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468"}
{"level":"info","ts":"2026-07-10T17:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/008cca66861f5ad7065ca992f89d454960094afa52da3d05ea52094f1dcdbab0"}
{"level":"debug","ts":"2026-07-10T17:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468"}
{"level":"debug","ts":"2026-07-10T17:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:51:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:51:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:51:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:51:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468"}
{"level":"debug","ts":"2026-07-10T17:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468"}
{"level":"debug","ts":"2026-07-10T17:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:51:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:51:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:51:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:51:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468"}
{"level":"debug","ts":"2026-07-10T17:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468"}
{"level":"debug","ts":"2026-07-10T17:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:51:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:51:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468"}
{"level":"debug","ts":"2026-07-10T17:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b77e441fca3b1c49d91e16349d3d64965fc8aba18081ea75c41019445591cc1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:51:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:51:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b77e441fca3b1c49d91e16349d3d64965fc8aba18081ea75c41019445591cc1"}
{"level":"info","ts":"2026-07-10T17:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b77e441fca3b1c49d91e16349d3d64965fc8aba18081ea75c41019445591cc1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b77e441fca3b1c49d91e16349d3d64965fc8aba18081ea75c41019445591cc1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b77e441fca3b1c49d91e16349d3d64965fc8aba18081ea75c41019445591cc1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b77e441fca3b1c49d91e16349d3d64965fc8aba18081ea75c41019445591cc1"}
{"level":"debug","ts":"2026-07-10T17:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b77e441fca3b1c49d91e16349d3d64965fc8aba18081ea75c41019445591cc1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:51:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:51:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b77e441fca3b1c49d91e16349d3d64965fc8aba18081ea75c41019445591cc1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b77e441fca3b1c49d91e16349d3d64965fc8aba18081ea75c41019445591cc1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b77e441fca3b1c49d91e16349d3d64965fc8aba18081ea75c41019445591cc1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b77e441fca3b1c49d91e16349d3d64965fc8aba18081ea75c41019445591cc1"}
{"level":"debug","ts":"2026-07-10T17:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad472bbbbfc45be957e9540909c4f0141a778a57609ca9630ff07441fa10d546","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:51:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:51:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad472bbbbfc45be957e9540909c4f0141a778a57609ca9630ff07441fa10d546","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad472bbbbfc45be957e9540909c4f0141a778a57609ca9630ff07441fa10d546","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:51:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:51:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad472bbbbfc45be957e9540909c4f0141a778a57609ca9630ff07441fa10d546"}
{"level":"info","ts":"2026-07-10T17:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad472bbbbfc45be957e9540909c4f0141a778a57609ca9630ff07441fa10d546","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad472bbbbfc45be957e9540909c4f0141a778a57609ca9630ff07441fa10d546","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:51:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:51:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T17:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ad472bbbbfc45be957e9540909c4f0141a778a57609ca9630ff07441fa10d546","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ad472bbbbfc45be957e9540909c4f0141a778a57609ca9630ff07441fa10d546\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T17:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad472bbbbfc45be957e9540909c4f0141a778a57609ca9630ff07441fa10d546","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad472bbbbfc45be957e9540909c4f0141a778a57609ca9630ff07441fa10d546","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad472bbbbfc45be957e9540909c4f0141a778a57609ca9630ff07441fa10d546"}
{"level":"info","ts":"2026-07-10T17:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad472bbbbfc45be957e9540909c4f0141a778a57609ca9630ff07441fa10d546"}
{"level":"debug","ts":"2026-07-10T17:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad472bbbbfc45be957e9540909c4f0141a778a57609ca9630ff07441fa10d546","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:51:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:51:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad472bbbbfc45be957e9540909c4f0141a778a57609ca9630ff07441fa10d546"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad472bbbbfc45be957e9540909c4f0141a778a57609ca9630ff07441fa10d546","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad472bbbbfc45be957e9540909c4f0141a778a57609ca9630ff07441fa10d546","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:51:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:51:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad472bbbbfc45be957e9540909c4f0141a778a57609ca9630ff07441fa10d546","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad472bbbbfc45be957e9540909c4f0141a778a57609ca9630ff07441fa10d546","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad472bbbbfc45be957e9540909c4f0141a778a57609ca9630ff07441fa10d546","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad472bbbbfc45be957e9540909c4f0141a778a57609ca9630ff07441fa10d546"}
{"level":"debug","ts":"2026-07-10T17:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad472bbbbfc45be957e9540909c4f0141a778a57609ca9630ff07441fa10d546","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad472bbbbfc45be957e9540909c4f0141a778a57609ca9630ff07441fa10d546"}
{"level":"debug","ts":"2026-07-10T17:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad472bbbbfc45be957e9540909c4f0141a778a57609ca9630ff07441fa10d546","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:51:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:51:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad472bbbbfc45be957e9540909c4f0141a778a57609ca9630ff07441fa10d546"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad472bbbbfc45be957e9540909c4f0141a778a57609ca9630ff07441fa10d546","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad472bbbbfc45be957e9540909c4f0141a778a57609ca9630ff07441fa10d546","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:51:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:51:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad472bbbbfc45be957e9540909c4f0141a778a57609ca9630ff07441fa10d546","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad472bbbbfc45be957e9540909c4f0141a778a57609ca9630ff07441fa10d546","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad472bbbbfc45be957e9540909c4f0141a778a57609ca9630ff07441fa10d546","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad472bbbbfc45be957e9540909c4f0141a778a57609ca9630ff07441fa10d546"}
{"level":"debug","ts":"2026-07-10T17:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad472bbbbfc45be957e9540909c4f0141a778a57609ca9630ff07441fa10d546","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad472bbbbfc45be957e9540909c4f0141a778a57609ca9630ff07441fa10d546"}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"114421a62fffc82798553a36b5df69a393d3307d3cee1178b70c82f2bd42c977","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"114421a62fffc82798553a36b5df69a393d3307d3cee1178b70c82f2bd42c977","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad472bbbbfc45be957e9540909c4f0141a778a57609ca9630ff07441fa10d546","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad472bbbbfc45be957e9540909c4f0141a778a57609ca9630ff07441fa10d546"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/114421a62fffc82798553a36b5df69a393d3307d3cee1178b70c82f2bd42c977"}
{"level":"info","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad472bbbbfc45be957e9540909c4f0141a778a57609ca9630ff07441fa10d546","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"114421a62fffc82798553a36b5df69a393d3307d3cee1178b70c82f2bd42c977","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad472bbbbfc45be957e9540909c4f0141a778a57609ca9630ff07441fa10d546","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"114421a62fffc82798553a36b5df69a393d3307d3cee1178b70c82f2bd42c977","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/114421a62fffc82798553a36b5df69a393d3307d3cee1178b70c82f2bd42c977"}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"114421a62fffc82798553a36b5df69a393d3307d3cee1178b70c82f2bd42c977","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["114421a62fffc82798553a36b5df69a393d3307d3cee1178b70c82f2bd42c977"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad472bbbbfc45be957e9540909c4f0141a778a57609ca9630ff07441fa10d546"}
{"level":"info","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"114421a62fffc82798553a36b5df69a393d3307d3cee1178b70c82f2bd42c977","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"114421a62fffc82798553a36b5df69a393d3307d3cee1178b70c82f2bd42c977","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd3bddf6e4a05f69fa19942f14d6d40cb1dd2d63a2f74a2b60b543434ca2e08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:51:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/114421a62fffc82798553a36b5df69a393d3307d3cee1178b70c82f2bd42c977"}
{"level":"info","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd3bddf6e4a05f69fa19942f14d6d40cb1dd2d63a2f74a2b60b543434ca2e08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd3bddf6e4a05f69fa19942f14d6d40cb1dd2d63a2f74a2b60b543434ca2e08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd3bddf6e4a05f69fa19942f14d6d40cb1dd2d63a2f74a2b60b543434ca2e08"}
{"level":"info","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd3bddf6e4a05f69fa19942f14d6d40cb1dd2d63a2f74a2b60b543434ca2e08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd3bddf6e4a05f69fa19942f14d6d40cb1dd2d63a2f74a2b60b543434ca2e08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3dd3bddf6e4a05f69fa19942f14d6d40cb1dd2d63a2f74a2b60b543434ca2e08","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3dd3bddf6e4a05f69fa19942f14d6d40cb1dd2d63a2f74a2b60b543434ca2e08\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd3bddf6e4a05f69fa19942f14d6d40cb1dd2d63a2f74a2b60b543434ca2e08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd3bddf6e4a05f69fa19942f14d6d40cb1dd2d63a2f74a2b60b543434ca2e08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd3bddf6e4a05f69fa19942f14d6d40cb1dd2d63a2f74a2b60b543434ca2e08"}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98458cdcd372698b1931c982b9f2704cb97fab7dcaae7a7b17c2b40d689a65fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:51:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd3bddf6e4a05f69fa19942f14d6d40cb1dd2d63a2f74a2b60b543434ca2e08"}
{"level":"info","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98458cdcd372698b1931c982b9f2704cb97fab7dcaae7a7b17c2b40d689a65fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98458cdcd372698b1931c982b9f2704cb97fab7dcaae7a7b17c2b40d689a65fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98458cdcd372698b1931c982b9f2704cb97fab7dcaae7a7b17c2b40d689a65fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd3bddf6e4a05f69fa19942f14d6d40cb1dd2d63a2f74a2b60b543434ca2e08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd3bddf6e4a05f69fa19942f14d6d40cb1dd2d63a2f74a2b60b543434ca2e08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98458cdcd372698b1931c982b9f2704cb97fab7dcaae7a7b17c2b40d689a65fd"}
{"level":"info","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd3bddf6e4a05f69fa19942f14d6d40cb1dd2d63a2f74a2b60b543434ca2e08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98458cdcd372698b1931c982b9f2704cb97fab7dcaae7a7b17c2b40d689a65fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd3bddf6e4a05f69fa19942f14d6d40cb1dd2d63a2f74a2b60b543434ca2e08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98458cdcd372698b1931c982b9f2704cb97fab7dcaae7a7b17c2b40d689a65fd"}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98458cdcd372698b1931c982b9f2704cb97fab7dcaae7a7b17c2b40d689a65fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98458cdcd372698b1931c982b9f2704cb97fab7dcaae7a7b17c2b40d689a65fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98458cdcd372698b1931c982b9f2704cb97fab7dcaae7a7b17c2b40d689a65fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98458cdcd372698b1931c982b9f2704cb97fab7dcaae7a7b17c2b40d689a65fd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd3bddf6e4a05f69fa19942f14d6d40cb1dd2d63a2f74a2b60b543434ca2e08"}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"335ead2fdaec6e066c598e8195ff35b0a4a87756a437cb8bb60507a211094aea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:51:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98458cdcd372698b1931c982b9f2704cb97fab7dcaae7a7b17c2b40d689a65fd"}
{"level":"info","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"335ead2fdaec6e066c598e8195ff35b0a4a87756a437cb8bb60507a211094aea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"335ead2fdaec6e066c598e8195ff35b0a4a87756a437cb8bb60507a211094aea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"335ead2fdaec6e066c598e8195ff35b0a4a87756a437cb8bb60507a211094aea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"335ead2fdaec6e066c598e8195ff35b0a4a87756a437cb8bb60507a211094aea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/335ead2fdaec6e066c598e8195ff35b0a4a87756a437cb8bb60507a211094aea"}
{"level":"error","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"335ead2fdaec6e066c598e8195ff35b0a4a87756a437cb8bb60507a211094aea","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"335ead2fdaec6e066c598e8195ff35b0a4a87756a437cb8bb60507a211094aea\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"335ead2fdaec6e066c598e8195ff35b0a4a87756a437cb8bb60507a211094aea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"335ead2fdaec6e066c598e8195ff35b0a4a87756a437cb8bb60507a211094aea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/335ead2fdaec6e066c598e8195ff35b0a4a87756a437cb8bb60507a211094aea"}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"335ead2fdaec6e066c598e8195ff35b0a4a87756a437cb8bb60507a211094aea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["335ead2fdaec6e066c598e8195ff35b0a4a87756a437cb8bb60507a211094aea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470"}
{"level":"info","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"335ead2fdaec6e066c598e8195ff35b0a4a87756a437cb8bb60507a211094aea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"335ead2fdaec6e066c598e8195ff35b0a4a87756a437cb8bb60507a211094aea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470"}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/335ead2fdaec6e066c598e8195ff35b0a4a87756a437cb8bb60507a211094aea"}
{"level":"info","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470"}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3"}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3"}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3"}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3"}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3"}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3"}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3"}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3"}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3"}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3"}
{"level":"debug","ts":"2026-07-10T17:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3"}
{"level":"debug","ts":"2026-07-10T17:52:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d932ce3fb0bb79576455d28029bec920f857a89cf4522d00339a09cee43675cf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:52:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d932ce3fb0bb79576455d28029bec920f857a89cf4522d00339a09cee43675cf"}
{"level":"debug","ts":"2026-07-10T17:52:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70bff0f96baae2143676d9c0fc28581532add8ec5b2d3900596699566d13afb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:52:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:52:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70bff0f96baae2143676d9c0fc28581532add8ec5b2d3900596699566d13afb8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70bff0f96baae2143676d9c0fc28581532add8ec5b2d3900596699566d13afb8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70bff0f96baae2143676d9c0fc28581532add8ec5b2d3900596699566d13afb8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:52:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70bff0f96baae2143676d9c0fc28581532add8ec5b2d3900596699566d13afb8"}
{"level":"debug","ts":"2026-07-10T17:52:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70bff0f96baae2143676d9c0fc28581532add8ec5b2d3900596699566d13afb8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:52:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70bff0f96baae2143676d9c0fc28581532add8ec5b2d3900596699566d13afb8"}
{"level":"debug","ts":"2026-07-10T17:52:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70bff0f96baae2143676d9c0fc28581532add8ec5b2d3900596699566d13afb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:52:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:52:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70bff0f96baae2143676d9c0fc28581532add8ec5b2d3900596699566d13afb8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70bff0f96baae2143676d9c0fc28581532add8ec5b2d3900596699566d13afb8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70bff0f96baae2143676d9c0fc28581532add8ec5b2d3900596699566d13afb8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad472bbbbfc45be957e9540909c4f0141a778a57609ca9630ff07441fa10d546","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:52:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70bff0f96baae2143676d9c0fc28581532add8ec5b2d3900596699566d13afb8"}
{"level":"info","ts":"2026-07-10T17:52:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad472bbbbfc45be957e9540909c4f0141a778a57609ca9630ff07441fa10d546"}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:52:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:52:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5"}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5"}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:52:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:52:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:52:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:52:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48352ac43f93a0ef720e4dbc0544cea25c7523c3bcb5ee74ace8ad736a96a4fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5"}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:52:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:52:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48352ac43f93a0ef720e4dbc0544cea25c7523c3bcb5ee74ace8ad736a96a4fc"}
{"level":"info","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:52:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:52:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5"}
{"level":"info","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5"}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5"}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:52:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:52:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470"}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:52:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:52:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:52:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:52:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468"}
{"level":"info","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:52:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:52:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470"}
{"level":"info","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:52:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:52:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:52:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:52:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5"}
{"level":"error","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:52:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:52:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"681c05b2cb3acb7c7865217a30f0e10e011a2c984fb04cb89cd3adfc2ff29154","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:52:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:52:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470"}
{"level":"error","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:52:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:52:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:52:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:52:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/681c05b2cb3acb7c7865217a30f0e10e011a2c984fb04cb89cd3adfc2ff29154"}
{"level":"error","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:52:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:52:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:52:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:52:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470"}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70d59a4b44c1122669955572431dd7c5e379112fd82294115ce38240b28100bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470"}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:52:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:52:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70d59a4b44c1122669955572431dd7c5e379112fd82294115ce38240b28100bf"}
{"level":"info","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470"}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:52:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:52:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"666c4064c80564b3583c630ddfa3ef5454d5ff954237f54e34a346468143ba9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137"}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd90da802c1749ca99ee03854d024088b1a862e40c1a93421698e4f05e66f094","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:52:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:52:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/666c4064c80564b3583c630ddfa3ef5454d5ff954237f54e34a346468143ba9c"}
{"level":"info","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"335ead2fdaec6e066c598e8195ff35b0a4a87756a437cb8bb60507a211094aea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:52:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:52:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca6a0f9d9ef276e924533254c5c4f88e7cc3fde1a9f19eddde7c8a0e9b05cdd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137"}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:52:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:52:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd90da802c1749ca99ee03854d024088b1a862e40c1a93421698e4f05e66f094"}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"114421a62fffc82798553a36b5df69a393d3307d3cee1178b70c82f2bd42c977","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/335ead2fdaec6e066c598e8195ff35b0a4a87756a437cb8bb60507a211094aea"}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53411c5219e93f038ab01ee004cf352e3d8d10848b5991a86e956adb44d84c4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c3b08df6ea021a48293314ae84da66c77dd8bec8b8971a08e97ed54ff2dfb0c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca6a0f9d9ef276e924533254c5c4f88e7cc3fde1a9f19eddde7c8a0e9b05cdd3"}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fe5cfe714cee1f160623c0fcfc7d499cb3269534ec8423d716891443ee95caa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137"}
{"level":"info","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/114421a62fffc82798553a36b5df69a393d3307d3cee1178b70c82f2bd42c977"}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd3bddf6e4a05f69fa19942f14d6d40cb1dd2d63a2f74a2b60b543434ca2e08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53411c5219e93f038ab01ee004cf352e3d8d10848b5991a86e956adb44d84c4d"}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c3b08df6ea021a48293314ae84da66c77dd8bec8b8971a08e97ed54ff2dfb0c"}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e49d1830106dd17774362b919fc87393cdd06130726a1a2b6b4a51ff564d4161","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98458cdcd372698b1931c982b9f2704cb97fab7dcaae7a7b17c2b40d689a65fd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fe5cfe714cee1f160623c0fcfc7d499cb3269534ec8423d716891443ee95caa"}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44986b74e95212f14a87fab3f97ef169d106d7c35ffa23704b9149693f3efbda","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd3bddf6e4a05f69fa19942f14d6d40cb1dd2d63a2f74a2b60b543434ca2e08"}
{"level":"info","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3"}
{"level":"debug","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b77e441fca3b1c49d91e16349d3d64965fc8aba18081ea75c41019445591cc1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e49d1830106dd17774362b919fc87393cdd06130726a1a2b6b4a51ff564d4161"}
{"level":"info","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98458cdcd372698b1931c982b9f2704cb97fab7dcaae7a7b17c2b40d689a65fd"}
{"level":"info","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44986b74e95212f14a87fab3f97ef169d106d7c35ffa23704b9149693f3efbda"}
{"level":"info","ts":"2026-07-10T17:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b77e441fca3b1c49d91e16349d3d64965fc8aba18081ea75c41019445591cc1"}
{"level":"info","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"73e0c521-2545-4564-a6aa-74b8a808c91c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:34668","PortSpecifier":{"PortValue":34668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"73e0c521-2545-4564-a6aa-74b8a808c91c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"73e0c521-2545-4564-a6aa-74b8a808c91c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:34668","PortSpecifier":{"PortValue":34668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783705933,"nanos":793894191},"http":{"id":"73e0c521-2545-4564-a6aa-74b8a808c91c","method":"POST","headers":{":authority":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"73e0c521-2545-4564-a6aa-74b8a808c91c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"73e0c521-2545-4564-a6aa-74b8a808c91c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3e01e4b4-81fa-44f6-acfe-5e63bab66066","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7eaac46e-c3e2-4f3a-8cb3-07e472cf6884"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bddae96f0fc5"]}}
{"level":"debug","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"73e0c521-2545-4564-a6aa-74b8a808c91c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bddae96f0fc5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7eaac46e-c3e2-4f3a-8cb3-07e472cf6884"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3e01e4b4-81fa-44f6-acfe-5e63bab66066","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5fe5cfe714cee1f160623c0fcfc7d499cb3269534ec8423d716891443ee95caa"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73e0c521-2545-4564-a6aa-74b8a808c91c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73e0c521-2545-4564-a6aa-74b8a808c91c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73e0c521-2545-4564-a6aa-74b8a808c91c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3beb3b/sub-test-model-3beb3b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"73e0c521-2545-4564-a6aa-74b8a808c91c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73e0c521-2545-4564-a6aa-74b8a808c91c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73e0c521-2545-4564-a6aa-74b8a808c91c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"73e0c521-2545-4564-a6aa-74b8a808c91c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"73e0c521-2545-4564-a6aa-74b8a808c91c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6cd18f18-38dd-4c98-b420-1c39557e4eb3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:59430","PortSpecifier":{"PortValue":59430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6cd18f18-38dd-4c98-b420-1c39557e4eb3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-9f66f0.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6cd18f18-38dd-4c98-b420-1c39557e4eb3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:59430","PortSpecifier":{"PortValue":59430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783705933,"nanos":832494266},"http":{"id":"6cd18f18-38dd-4c98-b420-1c39557e4eb3","method":"POST","headers":{":authority":"e2e-shared-b-9f66f0.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6cd18f18-38dd-4c98-b420-1c39557e4eb3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6cd18f18-38dd-4c98-b420-1c39557e4eb3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3e01e4b4-81fa-44f6-acfe-5e63bab66066","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7eaac46e-c3e2-4f3a-8cb3-07e472cf6884"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bddae96f0fc5"]}}
{"level":"debug","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6cd18f18-38dd-4c98-b420-1c39557e4eb3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bddae96f0fc5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7eaac46e-c3e2-4f3a-8cb3-07e472cf6884"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3e01e4b4-81fa-44f6-acfe-5e63bab66066","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-9f66f0.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6cd18f18-38dd-4c98-b420-1c39557e4eb3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6cd18f18-38dd-4c98-b420-1c39557e4eb3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6cd18f18-38dd-4c98-b420-1c39557e4eb3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-9f66f0/sub-test-model-9f66f0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6cd18f18-38dd-4c98-b420-1c39557e4eb3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6cd18f18-38dd-4c98-b420-1c39557e4eb3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6cd18f18-38dd-4c98-b420-1c39557e4eb3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6cd18f18-38dd-4c98-b420-1c39557e4eb3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6cd18f18-38dd-4c98-b420-1c39557e4eb3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c882e38b-b4d9-4658-93db-5d15c8c3ab89","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:34676","PortSpecifier":{"PortValue":34676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c882e38b-b4d9-4658-93db-5d15c8c3ab89","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c882e38b-b4d9-4658-93db-5d15c8c3ab89","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:34676","PortSpecifier":{"PortValue":34676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783705933,"nanos":873483142},"http":{"id":"c882e38b-b4d9-4658-93db-5d15c8c3ab89","method":"GET","headers":{":authority":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c882e38b-b4d9-4658-93db-5d15c8c3ab89","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8n7ug7DZraFsOb8X_nKCkZTRQDtA9LB9oG1AJuL16OHOyPxkZ6vBStnoOwd2"}
{"level":"debug","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c882e38b-b4d9-4658-93db-5d15c8c3ab89","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8n7ug7DZraFsOb8X_nKCkZTRQDtA9LB9oG1AJuL16OHOyPxkZ6vBStnoOwd2\"}"}
{"level":"debug","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c882e38b-b4d9-4658-93db-5d15c8c3ab89","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a576e8dd-b042-4b0d-8a13-f4418422d16a","keyName":"e2e-sub-iso-c12145","subscription":"e2e-a-only-dd44a4","tenant":"e2e-shared-a-3beb3b","userId":"a576e8dd-b042-4b0d-8a13-f4418422d16a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c882e38b-b4d9-4658-93db-5d15c8c3ab89","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c882e38b-b4d9-4658-93db-5d15c8c3ab89","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c882e38b-b4d9-4658-93db-5d15c8c3ab89","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c882e38b-b4d9-4658-93db-5d15c8c3ab89","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3beb3b/sub-test-model-3beb3b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c882e38b-b4d9-4658-93db-5d15c8c3ab89","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c882e38b-b4d9-4658-93db-5d15c8c3ab89","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c882e38b-b4d9-4658-93db-5d15c8c3ab89","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-dd44a4"}
{"level":"debug","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c882e38b-b4d9-4658-93db-5d15c8c3ab89","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c882e38b-b4d9-4658-93db-5d15c8c3ab89","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c882e38b-b4d9-4658-93db-5d15c8c3ab89","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c98d488-df3a-46cd-83a8-82e3ffe88206","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:59438","PortSpecifier":{"PortValue":59438}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8c98d488-df3a-46cd-83a8-82e3ffe88206","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-9f66f0.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c98d488-df3a-46cd-83a8-82e3ffe88206","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:59438","PortSpecifier":{"PortValue":59438}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783705933,"nanos":914495143},"http":{"id":"8c98d488-df3a-46cd-83a8-82e3ffe88206","method":"GET","headers":{":authority":"e2e-shared-b-9f66f0.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8c98d488-df3a-46cd-83a8-82e3ffe88206","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-HZfE757Ad8IJZROl_TePfHK9xsFoefAXUuDwAwjB2HbAUy172wyWcOOofZul"}
{"level":"debug","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8c98d488-df3a-46cd-83a8-82e3ffe88206","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-9f66f0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-HZfE757Ad8IJZROl_TePfHK9xsFoefAXUuDwAwjB2HbAUy172wyWcOOofZul\"}"}
{"level":"debug","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8c98d488-df3a-46cd-83a8-82e3ffe88206","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-9f66f0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c23e814b-943a-487a-ac3c-b791de14bfc1","keyName":"e2e-sub-iso-832999","subscription":"e2e-b-only-dd44a4","tenant":"e2e-shared-b-9f66f0","userId":"c23e814b-943a-487a-ac3c-b791de14bfc1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8c98d488-df3a-46cd-83a8-82e3ffe88206","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c98d488-df3a-46cd-83a8-82e3ffe88206","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c98d488-df3a-46cd-83a8-82e3ffe88206","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c98d488-df3a-46cd-83a8-82e3ffe88206","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-9f66f0/sub-test-model-9f66f0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8c98d488-df3a-46cd-83a8-82e3ffe88206","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c98d488-df3a-46cd-83a8-82e3ffe88206","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c98d488-df3a-46cd-83a8-82e3ffe88206","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-dd44a4"}
{"level":"debug","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c98d488-df3a-46cd-83a8-82e3ffe88206","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c98d488-df3a-46cd-83a8-82e3ffe88206","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:52:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c98d488-df3a-46cd-83a8-82e3ffe88206","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"18c2c467-fcf5-4c9c-a5ad-55ee66cddfc5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:41522","PortSpecifier":{"PortValue":41522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"18c2c467-fcf5-4c9c-a5ad-55ee66cddfc5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"18c2c467-fcf5-4c9c-a5ad-55ee66cddfc5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:41522","PortSpecifier":{"PortValue":41522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783705952,"nanos":276793278},"http":{"id":"18c2c467-fcf5-4c9c-a5ad-55ee66cddfc5","method":"POST","headers":{":authority":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"18c2c467-fcf5-4c9c-a5ad-55ee66cddfc5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"18c2c467-fcf5-4c9c-a5ad-55ee66cddfc5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3e01e4b4-81fa-44f6-acfe-5e63bab66066","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7eaac46e-c3e2-4f3a-8cb3-07e472cf6884"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bddae96f0fc5"]}}
{"level":"debug","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"18c2c467-fcf5-4c9c-a5ad-55ee66cddfc5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bddae96f0fc5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7eaac46e-c3e2-4f3a-8cb3-07e472cf6884"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3e01e4b4-81fa-44f6-acfe-5e63bab66066","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5fe5cfe714cee1f160623c0fcfc7d499cb3269534ec8423d716891443ee95caa"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18c2c467-fcf5-4c9c-a5ad-55ee66cddfc5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18c2c467-fcf5-4c9c-a5ad-55ee66cddfc5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18c2c467-fcf5-4c9c-a5ad-55ee66cddfc5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3beb3b/sub-test-model-3beb3b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"18c2c467-fcf5-4c9c-a5ad-55ee66cddfc5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"18c2c467-fcf5-4c9c-a5ad-55ee66cddfc5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"18c2c467-fcf5-4c9c-a5ad-55ee66cddfc5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"18c2c467-fcf5-4c9c-a5ad-55ee66cddfc5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"18c2c467-fcf5-4c9c-a5ad-55ee66cddfc5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"040c3866-b6f5-4462-a3d3-678a212015be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:33914","PortSpecifier":{"PortValue":33914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"040c3866-b6f5-4462-a3d3-678a212015be","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-9f66f0.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"040c3866-b6f5-4462-a3d3-678a212015be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:33914","PortSpecifier":{"PortValue":33914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783705952,"nanos":316674407},"http":{"id":"040c3866-b6f5-4462-a3d3-678a212015be","method":"POST","headers":{":authority":"e2e-shared-b-9f66f0.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"040c3866-b6f5-4462-a3d3-678a212015be","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"040c3866-b6f5-4462-a3d3-678a212015be","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3e01e4b4-81fa-44f6-acfe-5e63bab66066","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7eaac46e-c3e2-4f3a-8cb3-07e472cf6884"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bddae96f0fc5"]}}
{"level":"debug","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"040c3866-b6f5-4462-a3d3-678a212015be","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bddae96f0fc5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7eaac46e-c3e2-4f3a-8cb3-07e472cf6884"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3e01e4b4-81fa-44f6-acfe-5e63bab66066","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-9f66f0.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"040c3866-b6f5-4462-a3d3-678a212015be","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"040c3866-b6f5-4462-a3d3-678a212015be","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"040c3866-b6f5-4462-a3d3-678a212015be","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-9f66f0/sub-test-model-9f66f0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"040c3866-b6f5-4462-a3d3-678a212015be","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"040c3866-b6f5-4462-a3d3-678a212015be","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"040c3866-b6f5-4462-a3d3-678a212015be","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"040c3866-b6f5-4462-a3d3-678a212015be","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"040c3866-b6f5-4462-a3d3-678a212015be","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9d19f997-8447-48cc-b592-ae47f76390ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:41536","PortSpecifier":{"PortValue":41536}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9d19f997-8447-48cc-b592-ae47f76390ec","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9d19f997-8447-48cc-b592-ae47f76390ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:41536","PortSpecifier":{"PortValue":41536}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783705952,"nanos":351185040},"http":{"id":"9d19f997-8447-48cc-b592-ae47f76390ec","method":"POST","headers":{":authority":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9d19f997-8447-48cc-b592-ae47f76390ec","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Hu1A6XfYIkaVWj1z_Tb1D7zlKfyIF0j3aYOmF3Q3Yt9zFX3lLstCgFGl07di"}
{"level":"debug","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9d19f997-8447-48cc-b592-ae47f76390ec","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Hu1A6XfYIkaVWj1z_Tb1D7zlKfyIF0j3aYOmF3Q3Yt9zFX3lLstCgFGl07di\"}"}
{"level":"debug","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9d19f997-8447-48cc-b592-ae47f76390ec","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3a3f6a28-7745-476c-9148-66b3cde413a7","keyName":"e2e-sub-iso-c96374","subscription":"e2e-shared-sub-c3d985","tenant":"e2e-shared-a-3beb3b","userId":"3a3f6a28-7745-476c-9148-66b3cde413a7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9d19f997-8447-48cc-b592-ae47f76390ec","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d19f997-8447-48cc-b592-ae47f76390ec","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d19f997-8447-48cc-b592-ae47f76390ec","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d19f997-8447-48cc-b592-ae47f76390ec","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3beb3b/sub-test-model-3beb3b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9d19f997-8447-48cc-b592-ae47f76390ec","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9d19f997-8447-48cc-b592-ae47f76390ec","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-c3d985"}
{"level":"debug","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9d19f997-8447-48cc-b592-ae47f76390ec","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9d19f997-8447-48cc-b592-ae47f76390ec","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9d19f997-8447-48cc-b592-ae47f76390ec","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9d19f997-8447-48cc-b592-ae47f76390ec","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"38c74f8a-ef75-4967-a558-060699187831","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:33928","PortSpecifier":{"PortValue":33928}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"38c74f8a-ef75-4967-a558-060699187831","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-9f66f0.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"38c74f8a-ef75-4967-a558-060699187831","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:33928","PortSpecifier":{"PortValue":33928}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783705952,"nanos":378269099},"http":{"id":"38c74f8a-ef75-4967-a558-060699187831","method":"POST","headers":{":authority":"e2e-shared-b-9f66f0.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"38c74f8a-ef75-4967-a558-060699187831","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qGmeHs3uOx3J0esB_6VUTxwGBDHRUDTzM6LQRKxFqUQO4dPJLH9P0p5j9es1"}
{"level":"debug","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"38c74f8a-ef75-4967-a558-060699187831","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-9f66f0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qGmeHs3uOx3J0esB_6VUTxwGBDHRUDTzM6LQRKxFqUQO4dPJLH9P0p5j9es1\"}"}
{"level":"debug","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"38c74f8a-ef75-4967-a558-060699187831","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-9f66f0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"84770857-6dd9-4df2-ae08-e32a03ea4e19","keyName":"e2e-sub-iso-987f6e","subscription":"e2e-shared-sub-c3d985","tenant":"e2e-shared-b-9f66f0","userId":"84770857-6dd9-4df2-ae08-e32a03ea4e19","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"38c74f8a-ef75-4967-a558-060699187831","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"38c74f8a-ef75-4967-a558-060699187831","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"38c74f8a-ef75-4967-a558-060699187831","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"38c74f8a-ef75-4967-a558-060699187831","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-9f66f0/sub-test-model-9f66f0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"38c74f8a-ef75-4967-a558-060699187831","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"38c74f8a-ef75-4967-a558-060699187831","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"38c74f8a-ef75-4967-a558-060699187831","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"38c74f8a-ef75-4967-a558-060699187831","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-c3d985"}
{"level":"info","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"38c74f8a-ef75-4967-a558-060699187831","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:52:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"38c74f8a-ef75-4967-a558-060699187831","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70d59a4b44c1122669955572431dd7c5e379112fd82294115ce38240b28100bf"}
{"level":"info","ts":"2026-07-10T17:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd90da802c1749ca99ee03854d024088b1a862e40c1a93421698e4f05e66f094"}
{"level":"info","ts":"2026-07-10T17:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7c3b08df6ea021a48293314ae84da66c77dd8bec8b8971a08e97ed54ff2dfb0c"}
{"level":"info","ts":"2026-07-10T17:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d932ce3fb0bb79576455d28029bec920f857a89cf4522d00339a09cee43675cf"}
{"level":"info","ts":"2026-07-10T17:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d06029bc1aad45f0958426eb824e80e8d339f0e248d2daa2386adc7dbc2f6468"}
{"level":"info","ts":"2026-07-10T17:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53411c5219e93f038ab01ee004cf352e3d8d10848b5991a86e956adb44d84c4d"}
{"level":"info","ts":"2026-07-10T17:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/681c05b2cb3acb7c7865217a30f0e10e011a2c984fb04cb89cd3adfc2ff29154"}
{"level":"info","ts":"2026-07-10T17:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ca6a0f9d9ef276e924533254c5c4f88e7cc3fde1a9f19eddde7c8a0e9b05cdd3"}
{"level":"debug","ts":"2026-07-10T17:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"032b5f778367eb8a741f28a4f0de918770745d9bc96ad50f03d5cdc66414d68e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:52:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:52:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"032b5f778367eb8a741f28a4f0de918770745d9bc96ad50f03d5cdc66414d68e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"032b5f778367eb8a741f28a4f0de918770745d9bc96ad50f03d5cdc66414d68e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"032b5f778367eb8a741f28a4f0de918770745d9bc96ad50f03d5cdc66414d68e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/032b5f778367eb8a741f28a4f0de918770745d9bc96ad50f03d5cdc66414d68e"}
{"level":"debug","ts":"2026-07-10T17:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"032b5f778367eb8a741f28a4f0de918770745d9bc96ad50f03d5cdc66414d68e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/032b5f778367eb8a741f28a4f0de918770745d9bc96ad50f03d5cdc66414d68e"}
{"level":"debug","ts":"2026-07-10T17:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"032b5f778367eb8a741f28a4f0de918770745d9bc96ad50f03d5cdc66414d68e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:52:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:52:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["032b5f778367eb8a741f28a4f0de918770745d9bc96ad50f03d5cdc66414d68e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"032b5f778367eb8a741f28a4f0de918770745d9bc96ad50f03d5cdc66414d68e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"032b5f778367eb8a741f28a4f0de918770745d9bc96ad50f03d5cdc66414d68e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:52:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:52:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"032b5f778367eb8a741f28a4f0de918770745d9bc96ad50f03d5cdc66414d68e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"032b5f778367eb8a741f28a4f0de918770745d9bc96ad50f03d5cdc66414d68e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"032b5f778367eb8a741f28a4f0de918770745d9bc96ad50f03d5cdc66414d68e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/032b5f778367eb8a741f28a4f0de918770745d9bc96ad50f03d5cdc66414d68e"}
{"level":"debug","ts":"2026-07-10T17:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"032b5f778367eb8a741f28a4f0de918770745d9bc96ad50f03d5cdc66414d68e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/032b5f778367eb8a741f28a4f0de918770745d9bc96ad50f03d5cdc66414d68e"}
{"level":"debug","ts":"2026-07-10T17:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"032b5f778367eb8a741f28a4f0de918770745d9bc96ad50f03d5cdc66414d68e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:52:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:52:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["032b5f778367eb8a741f28a4f0de918770745d9bc96ad50f03d5cdc66414d68e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"032b5f778367eb8a741f28a4f0de918770745d9bc96ad50f03d5cdc66414d68e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"032b5f778367eb8a741f28a4f0de918770745d9bc96ad50f03d5cdc66414d68e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/032b5f778367eb8a741f28a4f0de918770745d9bc96ad50f03d5cdc66414d68e"}
{"level":"debug","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5edeb67e7d0909164ff56c952351e057cfdfef4b061a04ca491f655af38c6fc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:52:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:52:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5edeb67e7d0909164ff56c952351e057cfdfef4b061a04ca491f655af38c6fc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5edeb67e7d0909164ff56c952351e057cfdfef4b061a04ca491f655af38c6fc4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5edeb67e7d0909164ff56c952351e057cfdfef4b061a04ca491f655af38c6fc4"}
{"level":"debug","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5edeb67e7d0909164ff56c952351e057cfdfef4b061a04ca491f655af38c6fc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:52:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:52:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5edeb67e7d0909164ff56c952351e057cfdfef4b061a04ca491f655af38c6fc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5edeb67e7d0909164ff56c952351e057cfdfef4b061a04ca491f655af38c6fc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5edeb67e7d0909164ff56c952351e057cfdfef4b061a04ca491f655af38c6fc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:52:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:52:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5edeb67e7d0909164ff56c952351e057cfdfef4b061a04ca491f655af38c6fc4"}
{"level":"info","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5edeb67e7d0909164ff56c952351e057cfdfef4b061a04ca491f655af38c6fc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5edeb67e7d0909164ff56c952351e057cfdfef4b061a04ca491f655af38c6fc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5edeb67e7d0909164ff56c952351e057cfdfef4b061a04ca491f655af38c6fc4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5edeb67e7d0909164ff56c952351e057cfdfef4b061a04ca491f655af38c6fc4"}
{"level":"debug","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5edeb67e7d0909164ff56c952351e057cfdfef4b061a04ca491f655af38c6fc4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5edeb67e7d0909164ff56c952351e057cfdfef4b061a04ca491f655af38c6fc4"}
{"level":"debug","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a49dfabf9dd2b940273e48365e5786445f6a2ae42d60ab6b5a96f59a669d36a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:52:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:52:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a49dfabf9dd2b940273e48365e5786445f6a2ae42d60ab6b5a96f59a669d36a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22569a450059b7b16efd9e0bdfedf5edb095432e6276bcc2a73681e0c8a2c2bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:52:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:52:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a49dfabf9dd2b940273e48365e5786445f6a2ae42d60ab6b5a96f59a669d36a"}
{"level":"info","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22569a450059b7b16efd9e0bdfedf5edb095432e6276bcc2a73681e0c8a2c2bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a49dfabf9dd2b940273e48365e5786445f6a2ae42d60ab6b5a96f59a669d36a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:52:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:52:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a49dfabf9dd2b940273e48365e5786445f6a2ae42d60ab6b5a96f59a669d36a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22569a450059b7b16efd9e0bdfedf5edb095432e6276bcc2a73681e0c8a2c2bc"}
{"level":"info","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a49dfabf9dd2b940273e48365e5786445f6a2ae42d60ab6b5a96f59a669d36a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5edeb67e7d0909164ff56c952351e057cfdfef4b061a04ca491f655af38c6fc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:52:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:52:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5edeb67e7d0909164ff56c952351e057cfdfef4b061a04ca491f655af38c6fc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5edeb67e7d0909164ff56c952351e057cfdfef4b061a04ca491f655af38c6fc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22569a450059b7b16efd9e0bdfedf5edb095432e6276bcc2a73681e0c8a2c2bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:52:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:52:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22569a450059b7b16efd9e0bdfedf5edb095432e6276bcc2a73681e0c8a2c2bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a49dfabf9dd2b940273e48365e5786445f6a2ae42d60ab6b5a96f59a669d36a"}
{"level":"info","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22569a450059b7b16efd9e0bdfedf5edb095432e6276bcc2a73681e0c8a2c2bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a49dfabf9dd2b940273e48365e5786445f6a2ae42d60ab6b5a96f59a669d36a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5edeb67e7d0909164ff56c952351e057cfdfef4b061a04ca491f655af38c6fc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22569a450059b7b16efd9e0bdfedf5edb095432e6276bcc2a73681e0c8a2c2bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:52:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:52:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22569a450059b7b16efd9e0bdfedf5edb095432e6276bcc2a73681e0c8a2c2bc"}
{"level":"info","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22569a450059b7b16efd9e0bdfedf5edb095432e6276bcc2a73681e0c8a2c2bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22569a450059b7b16efd9e0bdfedf5edb095432e6276bcc2a73681e0c8a2c2bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:52:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:52:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22569a450059b7b16efd9e0bdfedf5edb095432e6276bcc2a73681e0c8a2c2bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22569a450059b7b16efd9e0bdfedf5edb095432e6276bcc2a73681e0c8a2c2bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22569a450059b7b16efd9e0bdfedf5edb095432e6276bcc2a73681e0c8a2c2bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:52:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:52:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22569a450059b7b16efd9e0bdfedf5edb095432e6276bcc2a73681e0c8a2c2bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"22569a450059b7b16efd9e0bdfedf5edb095432e6276bcc2a73681e0c8a2c2bc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"22569a450059b7b16efd9e0bdfedf5edb095432e6276bcc2a73681e0c8a2c2bc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a72d19fb1df7be5dbd254fd3096b7419b973a8ef93faba0996992afa292a7d81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:52:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:52:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5edeb67e7d0909164ff56c952351e057cfdfef4b061a04ca491f655af38c6fc4"}
{"level":"info","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a72d19fb1df7be5dbd254fd3096b7419b973a8ef93faba0996992afa292a7d81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22569a450059b7b16efd9e0bdfedf5edb095432e6276bcc2a73681e0c8a2c2bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a72d19fb1df7be5dbd254fd3096b7419b973a8ef93faba0996992afa292a7d81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a72d19fb1df7be5dbd254fd3096b7419b973a8ef93faba0996992afa292a7d81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a49dfabf9dd2b940273e48365e5786445f6a2ae42d60ab6b5a96f59a669d36a"}
{"level":"debug","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a72d19fb1df7be5dbd254fd3096b7419b973a8ef93faba0996992afa292a7d81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22569a450059b7b16efd9e0bdfedf5edb095432e6276bcc2a73681e0c8a2c2bc"}
{"level":"info","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a72d19fb1df7be5dbd254fd3096b7419b973a8ef93faba0996992afa292a7d81"}
{"level":"debug","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a72d19fb1df7be5dbd254fd3096b7419b973a8ef93faba0996992afa292a7d81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:52:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:52:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a72d19fb1df7be5dbd254fd3096b7419b973a8ef93faba0996992afa292a7d81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a72d19fb1df7be5dbd254fd3096b7419b973a8ef93faba0996992afa292a7d81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a72d19fb1df7be5dbd254fd3096b7419b973a8ef93faba0996992afa292a7d81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:52:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:52:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a72d19fb1df7be5dbd254fd3096b7419b973a8ef93faba0996992afa292a7d81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88d5b0f8219c3483206029353819f9a541082a6720ced97055f2fc2c8da7b251","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:52:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:52:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a72d19fb1df7be5dbd254fd3096b7419b973a8ef93faba0996992afa292a7d81"}
{"level":"info","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88d5b0f8219c3483206029353819f9a541082a6720ced97055f2fc2c8da7b251","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a72d19fb1df7be5dbd254fd3096b7419b973a8ef93faba0996992afa292a7d81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:52:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:52:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a72d19fb1df7be5dbd254fd3096b7419b973a8ef93faba0996992afa292a7d81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88d5b0f8219c3483206029353819f9a541082a6720ced97055f2fc2c8da7b251"}
{"level":"info","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a72d19fb1df7be5dbd254fd3096b7419b973a8ef93faba0996992afa292a7d81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88d5b0f8219c3483206029353819f9a541082a6720ced97055f2fc2c8da7b251","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:52:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:52:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88d5b0f8219c3483206029353819f9a541082a6720ced97055f2fc2c8da7b251"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88d5b0f8219c3483206029353819f9a541082a6720ced97055f2fc2c8da7b251","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a72d19fb1df7be5dbd254fd3096b7419b973a8ef93faba0996992afa292a7d81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:52:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:52:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a72d19fb1df7be5dbd254fd3096b7419b973a8ef93faba0996992afa292a7d81"}
{"level":"info","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a72d19fb1df7be5dbd254fd3096b7419b973a8ef93faba0996992afa292a7d81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88d5b0f8219c3483206029353819f9a541082a6720ced97055f2fc2c8da7b251","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:52:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:52:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88d5b0f8219c3483206029353819f9a541082a6720ced97055f2fc2c8da7b251","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a72d19fb1df7be5dbd254fd3096b7419b973a8ef93faba0996992afa292a7d81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:52:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:52:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a72d19fb1df7be5dbd254fd3096b7419b973a8ef93faba0996992afa292a7d81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a72d19fb1df7be5dbd254fd3096b7419b973a8ef93faba0996992afa292a7d81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88d5b0f8219c3483206029353819f9a541082a6720ced97055f2fc2c8da7b251","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a72d19fb1df7be5dbd254fd3096b7419b973a8ef93faba0996992afa292a7d81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1ee3352ba8335d3da2b6a9bec659c561d4e18ce5a9de62e196fbe1d09f2ff85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:52:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:52:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88d5b0f8219c3483206029353819f9a541082a6720ced97055f2fc2c8da7b251"}
{"level":"info","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1ee3352ba8335d3da2b6a9bec659c561d4e18ce5a9de62e196fbe1d09f2ff85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88d5b0f8219c3483206029353819f9a541082a6720ced97055f2fc2c8da7b251","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:52:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:52:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88d5b0f8219c3483206029353819f9a541082a6720ced97055f2fc2c8da7b251"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88d5b0f8219c3483206029353819f9a541082a6720ced97055f2fc2c8da7b251","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1ee3352ba8335d3da2b6a9bec659c561d4e18ce5a9de62e196fbe1d09f2ff85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88d5b0f8219c3483206029353819f9a541082a6720ced97055f2fc2c8da7b251","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1ee3352ba8335d3da2b6a9bec659c561d4e18ce5a9de62e196fbe1d09f2ff85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a72d19fb1df7be5dbd254fd3096b7419b973a8ef93faba0996992afa292a7d81"}
{"level":"debug","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1ee3352ba8335d3da2b6a9bec659c561d4e18ce5a9de62e196fbe1d09f2ff85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:52:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:52:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1ee3352ba8335d3da2b6a9bec659c561d4e18ce5a9de62e196fbe1d09f2ff85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1ee3352ba8335d3da2b6a9bec659c561d4e18ce5a9de62e196fbe1d09f2ff85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1ee3352ba8335d3da2b6a9bec659c561d4e18ce5a9de62e196fbe1d09f2ff85"}
{"level":"debug","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c113bb4c59a7cb1d16bedc1f3326168b08faf9592dad1f285beeb24ebd7f7521","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:52:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:52:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88d5b0f8219c3483206029353819f9a541082a6720ced97055f2fc2c8da7b251"}
{"level":"info","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c113bb4c59a7cb1d16bedc1f3326168b08faf9592dad1f285beeb24ebd7f7521","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1ee3352ba8335d3da2b6a9bec659c561d4e18ce5a9de62e196fbe1d09f2ff85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c113bb4c59a7cb1d16bedc1f3326168b08faf9592dad1f285beeb24ebd7f7521","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c113bb4c59a7cb1d16bedc1f3326168b08faf9592dad1f285beeb24ebd7f7521","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1ee3352ba8335d3da2b6a9bec659c561d4e18ce5a9de62e196fbe1d09f2ff85"}
{"level":"debug","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c113bb4c59a7cb1d16bedc1f3326168b08faf9592dad1f285beeb24ebd7f7521","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:52:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:52:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c113bb4c59a7cb1d16bedc1f3326168b08faf9592dad1f285beeb24ebd7f7521"}
{"level":"info","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c113bb4c59a7cb1d16bedc1f3326168b08faf9592dad1f285beeb24ebd7f7521","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c113bb4c59a7cb1d16bedc1f3326168b08faf9592dad1f285beeb24ebd7f7521","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c113bb4c59a7cb1d16bedc1f3326168b08faf9592dad1f285beeb24ebd7f7521"}
{"level":"info","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/114421a62fffc82798553a36b5df69a393d3307d3cee1178b70c82f2bd42c977"}
{"level":"debug","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c113bb4c59a7cb1d16bedc1f3326168b08faf9592dad1f285beeb24ebd7f7521","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:52:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:52:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c113bb4c59a7cb1d16bedc1f3326168b08faf9592dad1f285beeb24ebd7f7521"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f6a97538daa6bafceae21f5f0928a725bb59908e85c9f8e37d34f0faa5e8fdc3"}
{"level":"info","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98458cdcd372698b1931c982b9f2704cb97fab7dcaae7a7b17c2b40d689a65fd"}
{"level":"info","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c113bb4c59a7cb1d16bedc1f3326168b08faf9592dad1f285beeb24ebd7f7521","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c113bb4c59a7cb1d16bedc1f3326168b08faf9592dad1f285beeb24ebd7f7521","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c113bb4c59a7cb1d16bedc1f3326168b08faf9592dad1f285beeb24ebd7f7521"}
{"level":"debug","ts":"2026-07-10T17:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1ee3352ba8335d3da2b6a9bec659c561d4e18ce5a9de62e196fbe1d09f2ff85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:52:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:52:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1ee3352ba8335d3da2b6a9bec659c561d4e18ce5a9de62e196fbe1d09f2ff85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b4d31afa9ffe66df72a91e6044a250facd7fae00810305bfda91e918de49b470"}
{"level":"info","ts":"2026-07-10T17:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1ee3352ba8335d3da2b6a9bec659c561d4e18ce5a9de62e196fbe1d09f2ff85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1ee3352ba8335d3da2b6a9bec659c561d4e18ce5a9de62e196fbe1d09f2ff85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:52:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:52:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1ee3352ba8335d3da2b6a9bec659c561d4e18ce5a9de62e196fbe1d09f2ff85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1ee3352ba8335d3da2b6a9bec659c561d4e18ce5a9de62e196fbe1d09f2ff85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1ee3352ba8335d3da2b6a9bec659c561d4e18ce5a9de62e196fbe1d09f2ff85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1ee3352ba8335d3da2b6a9bec659c561d4e18ce5a9de62e196fbe1d09f2ff85"}
{"level":"info","ts":"2026-07-10T17:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/335ead2fdaec6e066c598e8195ff35b0a4a87756a437cb8bb60507a211094aea"}
{"level":"info","ts":"2026-07-10T17:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b77e441fca3b1c49d91e16349d3d64965fc8aba18081ea75c41019445591cc1"}
{"level":"info","ts":"2026-07-10T17:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3dd3bddf6e4a05f69fa19942f14d6d40cb1dd2d63a2f74a2b60b543434ca2e08"}
{"level":"debug","ts":"2026-07-10T17:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1ee3352ba8335d3da2b6a9bec659c561d4e18ce5a9de62e196fbe1d09f2ff85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1ee3352ba8335d3da2b6a9bec659c561d4e18ce5a9de62e196fbe1d09f2ff85"}
{"level":"info","ts":"2026-07-10T17:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad472bbbbfc45be957e9540909c4f0141a778a57609ca9630ff07441fa10d546"}
{"level":"debug","ts":"2026-07-10T17:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1ee3352ba8335d3da2b6a9bec659c561d4e18ce5a9de62e196fbe1d09f2ff85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:52:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:52:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1ee3352ba8335d3da2b6a9bec659c561d4e18ce5a9de62e196fbe1d09f2ff85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1ee3352ba8335d3da2b6a9bec659c561d4e18ce5a9de62e196fbe1d09f2ff85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1ee3352ba8335d3da2b6a9bec659c561d4e18ce5a9de62e196fbe1d09f2ff85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1ee3352ba8335d3da2b6a9bec659c561d4e18ce5a9de62e196fbe1d09f2ff85"}
{"level":"debug","ts":"2026-07-10T17:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3740e7770f63b03b610e0dd41cbb1c50227bdc414eeb9954e03ed2c328af67b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:53:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:53:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3740e7770f63b03b610e0dd41cbb1c50227bdc414eeb9954e03ed2c328af67b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3740e7770f63b03b610e0dd41cbb1c50227bdc414eeb9954e03ed2c328af67b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3740e7770f63b03b610e0dd41cbb1c50227bdc414eeb9954e03ed2c328af67b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3740e7770f63b03b610e0dd41cbb1c50227bdc414eeb9954e03ed2c328af67b"}
{"level":"debug","ts":"2026-07-10T17:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3740e7770f63b03b610e0dd41cbb1c50227bdc414eeb9954e03ed2c328af67b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3740e7770f63b03b610e0dd41cbb1c50227bdc414eeb9954e03ed2c328af67b"}
{"level":"debug","ts":"2026-07-10T17:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3740e7770f63b03b610e0dd41cbb1c50227bdc414eeb9954e03ed2c328af67b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:53:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:53:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3740e7770f63b03b610e0dd41cbb1c50227bdc414eeb9954e03ed2c328af67b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3740e7770f63b03b610e0dd41cbb1c50227bdc414eeb9954e03ed2c328af67b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3740e7770f63b03b610e0dd41cbb1c50227bdc414eeb9954e03ed2c328af67b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:53:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:53:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3740e7770f63b03b610e0dd41cbb1c50227bdc414eeb9954e03ed2c328af67b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3740e7770f63b03b610e0dd41cbb1c50227bdc414eeb9954e03ed2c328af67b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3740e7770f63b03b610e0dd41cbb1c50227bdc414eeb9954e03ed2c328af67b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3740e7770f63b03b610e0dd41cbb1c50227bdc414eeb9954e03ed2c328af67b"}
{"level":"debug","ts":"2026-07-10T17:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3740e7770f63b03b610e0dd41cbb1c50227bdc414eeb9954e03ed2c328af67b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3740e7770f63b03b610e0dd41cbb1c50227bdc414eeb9954e03ed2c328af67b"}
{"level":"debug","ts":"2026-07-10T17:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3740e7770f63b03b610e0dd41cbb1c50227bdc414eeb9954e03ed2c328af67b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:53:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:53:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3740e7770f63b03b610e0dd41cbb1c50227bdc414eeb9954e03ed2c328af67b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3740e7770f63b03b610e0dd41cbb1c50227bdc414eeb9954e03ed2c328af67b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3740e7770f63b03b610e0dd41cbb1c50227bdc414eeb9954e03ed2c328af67b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3740e7770f63b03b610e0dd41cbb1c50227bdc414eeb9954e03ed2c328af67b"}
{"level":"debug","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a9fe50b37dea316e9925c164c4d3e667cbe4c31fd1d4fd04eafb79c4edbfa96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a9fe50b37dea316e9925c164c4d3e667cbe4c31fd1d4fd04eafb79c4edbfa96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a9fe50b37dea316e9925c164c4d3e667cbe4c31fd1d4fd04eafb79c4edbfa96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a9fe50b37dea316e9925c164c4d3e667cbe4c31fd1d4fd04eafb79c4edbfa96","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a9fe50b37dea316e9925c164c4d3e667cbe4c31fd1d4fd04eafb79c4edbfa96"}
{"level":"debug","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a9fe50b37dea316e9925c164c4d3e667cbe4c31fd1d4fd04eafb79c4edbfa96","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a9fe50b37dea316e9925c164c4d3e667cbe4c31fd1d4fd04eafb79c4edbfa96"}
{"level":"debug","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a9fe50b37dea316e9925c164c4d3e667cbe4c31fd1d4fd04eafb79c4edbfa96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a9fe50b37dea316e9925c164c4d3e667cbe4c31fd1d4fd04eafb79c4edbfa96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a9fe50b37dea316e9925c164c4d3e667cbe4c31fd1d4fd04eafb79c4edbfa96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a9fe50b37dea316e9925c164c4d3e667cbe4c31fd1d4fd04eafb79c4edbfa96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a9fe50b37dea316e9925c164c4d3e667cbe4c31fd1d4fd04eafb79c4edbfa96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a9fe50b37dea316e9925c164c4d3e667cbe4c31fd1d4fd04eafb79c4edbfa96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a9fe50b37dea316e9925c164c4d3e667cbe4c31fd1d4fd04eafb79c4edbfa96","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a9fe50b37dea316e9925c164c4d3e667cbe4c31fd1d4fd04eafb79c4edbfa96"}
{"level":"debug","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a9fe50b37dea316e9925c164c4d3e667cbe4c31fd1d4fd04eafb79c4edbfa96","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a9fe50b37dea316e9925c164c4d3e667cbe4c31fd1d4fd04eafb79c4edbfa96"}
{"level":"debug","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a9fe50b37dea316e9925c164c4d3e667cbe4c31fd1d4fd04eafb79c4edbfa96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a9fe50b37dea316e9925c164c4d3e667cbe4c31fd1d4fd04eafb79c4edbfa96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a9fe50b37dea316e9925c164c4d3e667cbe4c31fd1d4fd04eafb79c4edbfa96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a9fe50b37dea316e9925c164c4d3e667cbe4c31fd1d4fd04eafb79c4edbfa96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a9fe50b37dea316e9925c164c4d3e667cbe4c31fd1d4fd04eafb79c4edbfa96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a9fe50b37dea316e9925c164c4d3e667cbe4c31fd1d4fd04eafb79c4edbfa96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a9fe50b37dea316e9925c164c4d3e667cbe4c31fd1d4fd04eafb79c4edbfa96","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a9fe50b37dea316e9925c164c4d3e667cbe4c31fd1d4fd04eafb79c4edbfa96"}
{"level":"debug","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a9fe50b37dea316e9925c164c4d3e667cbe4c31fd1d4fd04eafb79c4edbfa96","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a9fe50b37dea316e9925c164c4d3e667cbe4c31fd1d4fd04eafb79c4edbfa96"}
{"level":"debug","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a9fe50b37dea316e9925c164c4d3e667cbe4c31fd1d4fd04eafb79c4edbfa96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a9fe50b37dea316e9925c164c4d3e667cbe4c31fd1d4fd04eafb79c4edbfa96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a9fe50b37dea316e9925c164c4d3e667cbe4c31fd1d4fd04eafb79c4edbfa96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a9fe50b37dea316e9925c164c4d3e667cbe4c31fd1d4fd04eafb79c4edbfa96","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a9fe50b37dea316e9925c164c4d3e667cbe4c31fd1d4fd04eafb79c4edbfa96"}
{"level":"debug","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc86d4eb3e6c27ce523044c464a4a97dc25617003b6e6159d41c6e6fd59a376f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc86d4eb3e6c27ce523044c464a4a97dc25617003b6e6159d41c6e6fd59a376f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc86d4eb3e6c27ce523044c464a4a97dc25617003b6e6159d41c6e6fd59a376f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc86d4eb3e6c27ce523044c464a4a97dc25617003b6e6159d41c6e6fd59a376f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc86d4eb3e6c27ce523044c464a4a97dc25617003b6e6159d41c6e6fd59a376f"}
{"level":"debug","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc86d4eb3e6c27ce523044c464a4a97dc25617003b6e6159d41c6e6fd59a376f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc86d4eb3e6c27ce523044c464a4a97dc25617003b6e6159d41c6e6fd59a376f"}
{"level":"debug","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc86d4eb3e6c27ce523044c464a4a97dc25617003b6e6159d41c6e6fd59a376f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc86d4eb3e6c27ce523044c464a4a97dc25617003b6e6159d41c6e6fd59a376f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc86d4eb3e6c27ce523044c464a4a97dc25617003b6e6159d41c6e6fd59a376f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc86d4eb3e6c27ce523044c464a4a97dc25617003b6e6159d41c6e6fd59a376f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc86d4eb3e6c27ce523044c464a4a97dc25617003b6e6159d41c6e6fd59a376f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ad7bf3834477a5b4457de2c7edaf443b0d8a6295dc994df9977c29a5579ac57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc86d4eb3e6c27ce523044c464a4a97dc25617003b6e6159d41c6e6fd59a376f"}
{"level":"info","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ad7bf3834477a5b4457de2c7edaf443b0d8a6295dc994df9977c29a5579ac57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc86d4eb3e6c27ce523044c464a4a97dc25617003b6e6159d41c6e6fd59a376f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc86d4eb3e6c27ce523044c464a4a97dc25617003b6e6159d41c6e6fd59a376f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ad7bf3834477a5b4457de2c7edaf443b0d8a6295dc994df9977c29a5579ac57"}
{"level":"info","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc86d4eb3e6c27ce523044c464a4a97dc25617003b6e6159d41c6e6fd59a376f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ad7bf3834477a5b4457de2c7edaf443b0d8a6295dc994df9977c29a5579ac57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ad7bf3834477a5b4457de2c7edaf443b0d8a6295dc994df9977c29a5579ac57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ad7bf3834477a5b4457de2c7edaf443b0d8a6295dc994df9977c29a5579ac57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc86d4eb3e6c27ce523044c464a4a97dc25617003b6e6159d41c6e6fd59a376f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc86d4eb3e6c27ce523044c464a4a97dc25617003b6e6159d41c6e6fd59a376f"}
{"level":"info","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc86d4eb3e6c27ce523044c464a4a97dc25617003b6e6159d41c6e6fd59a376f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ad7bf3834477a5b4457de2c7edaf443b0d8a6295dc994df9977c29a5579ac57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ad7bf3834477a5b4457de2c7edaf443b0d8a6295dc994df9977c29a5579ac57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc86d4eb3e6c27ce523044c464a4a97dc25617003b6e6159d41c6e6fd59a376f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc86d4eb3e6c27ce523044c464a4a97dc25617003b6e6159d41c6e6fd59a376f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ad7bf3834477a5b4457de2c7edaf443b0d8a6295dc994df9977c29a5579ac57"}
{"level":"info","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc86d4eb3e6c27ce523044c464a4a97dc25617003b6e6159d41c6e6fd59a376f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ad7bf3834477a5b4457de2c7edaf443b0d8a6295dc994df9977c29a5579ac57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ad7bf3834477a5b4457de2c7edaf443b0d8a6295dc994df9977c29a5579ac57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ad7bf3834477a5b4457de2c7edaf443b0d8a6295dc994df9977c29a5579ac57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc86d4eb3e6c27ce523044c464a4a97dc25617003b6e6159d41c6e6fd59a376f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc86d4eb3e6c27ce523044c464a4a97dc25617003b6e6159d41c6e6fd59a376f"}
{"level":"info","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc86d4eb3e6c27ce523044c464a4a97dc25617003b6e6159d41c6e6fd59a376f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ad7bf3834477a5b4457de2c7edaf443b0d8a6295dc994df9977c29a5579ac57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ad7bf3834477a5b4457de2c7edaf443b0d8a6295dc994df9977c29a5579ac57"}
{"level":"info","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ad7bf3834477a5b4457de2c7edaf443b0d8a6295dc994df9977c29a5579ac57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2cfe30bae599a13d0ad096e345c366977da54ed88fb54d09236260055fb59ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2cfe30bae599a13d0ad096e345c366977da54ed88fb54d09236260055fb59ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc86d4eb3e6c27ce523044c464a4a97dc25617003b6e6159d41c6e6fd59a376f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1905c217ab456dd10b0bd365bd89ee8cab40b7a6b011c11e6f44a8bbea719840","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc86d4eb3e6c27ce523044c464a4a97dc25617003b6e6159d41c6e6fd59a376f"}
{"level":"info","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1905c217ab456dd10b0bd365bd89ee8cab40b7a6b011c11e6f44a8bbea719840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ad7bf3834477a5b4457de2c7edaf443b0d8a6295dc994df9977c29a5579ac57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ad7bf3834477a5b4457de2c7edaf443b0d8a6295dc994df9977c29a5579ac57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ad7bf3834477a5b4457de2c7edaf443b0d8a6295dc994df9977c29a5579ac57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2cfe30bae599a13d0ad096e345c366977da54ed88fb54d09236260055fb59ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2cfe30bae599a13d0ad096e345c366977da54ed88fb54d09236260055fb59ab"}
{"level":"info","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2cfe30bae599a13d0ad096e345c366977da54ed88fb54d09236260055fb59ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc86d4eb3e6c27ce523044c464a4a97dc25617003b6e6159d41c6e6fd59a376f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc86d4eb3e6c27ce523044c464a4a97dc25617003b6e6159d41c6e6fd59a376f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1905c217ab456dd10b0bd365bd89ee8cab40b7a6b011c11e6f44a8bbea719840"}
{"level":"info","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc86d4eb3e6c27ce523044c464a4a97dc25617003b6e6159d41c6e6fd59a376f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1905c217ab456dd10b0bd365bd89ee8cab40b7a6b011c11e6f44a8bbea719840","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1905c217ab456dd10b0bd365bd89ee8cab40b7a6b011c11e6f44a8bbea719840"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1905c217ab456dd10b0bd365bd89ee8cab40b7a6b011c11e6f44a8bbea719840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ad7bf3834477a5b4457de2c7edaf443b0d8a6295dc994df9977c29a5579ac57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ad7bf3834477a5b4457de2c7edaf443b0d8a6295dc994df9977c29a5579ac57"}
{"level":"info","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ad7bf3834477a5b4457de2c7edaf443b0d8a6295dc994df9977c29a5579ac57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2cfe30bae599a13d0ad096e345c366977da54ed88fb54d09236260055fb59ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc86d4eb3e6c27ce523044c464a4a97dc25617003b6e6159d41c6e6fd59a376f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1905c217ab456dd10b0bd365bd89ee8cab40b7a6b011c11e6f44a8bbea719840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ad7bf3834477a5b4457de2c7edaf443b0d8a6295dc994df9977c29a5579ac57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ad7bf3834477a5b4457de2c7edaf443b0d8a6295dc994df9977c29a5579ac57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2cfe30bae599a13d0ad096e345c366977da54ed88fb54d09236260055fb59ab"}
{"level":"info","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ad7bf3834477a5b4457de2c7edaf443b0d8a6295dc994df9977c29a5579ac57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ad7bf3834477a5b4457de2c7edaf443b0d8a6295dc994df9977c29a5579ac57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ad7bf3834477a5b4457de2c7edaf443b0d8a6295dc994df9977c29a5579ac57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4ad7bf3834477a5b4457de2c7edaf443b0d8a6295dc994df9977c29a5579ac57","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4ad7bf3834477a5b4457de2c7edaf443b0d8a6295dc994df9977c29a5579ac57\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ad7bf3834477a5b4457de2c7edaf443b0d8a6295dc994df9977c29a5579ac57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2cfe30bae599a13d0ad096e345c366977da54ed88fb54d09236260055fb59ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:53:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2cfe30bae599a13d0ad096e345c366977da54ed88fb54d09236260055fb59ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc86d4eb3e6c27ce523044c464a4a97dc25617003b6e6159d41c6e6fd59a376f"}
{"level":"info","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2cfe30bae599a13d0ad096e345c366977da54ed88fb54d09236260055fb59ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ad7bf3834477a5b4457de2c7edaf443b0d8a6295dc994df9977c29a5579ac57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2cfe30bae599a13d0ad096e345c366977da54ed88fb54d09236260055fb59ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1905c217ab456dd10b0bd365bd89ee8cab40b7a6b011c11e6f44a8bbea719840"}
{"level":"info","ts":"2026-07-10T17:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ad7bf3834477a5b4457de2c7edaf443b0d8a6295dc994df9977c29a5579ac57"}
{"level":"debug","ts":"2026-07-10T17:53:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3e13e8c2ce38b386a6ebd84a9b13ac6116c2efd89c4ae1d32220cb836c273b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:53:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:53:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:53:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2cfe30bae599a13d0ad096e345c366977da54ed88fb54d09236260055fb59ab"}
{"level":"info","ts":"2026-07-10T17:53:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3e13e8c2ce38b386a6ebd84a9b13ac6116c2efd89c4ae1d32220cb836c273b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3e13e8c2ce38b386a6ebd84a9b13ac6116c2efd89c4ae1d32220cb836c273b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:53:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:53:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:53:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3e13e8c2ce38b386a6ebd84a9b13ac6116c2efd89c4ae1d32220cb836c273b3"}
{"level":"info","ts":"2026-07-10T17:53:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3e13e8c2ce38b386a6ebd84a9b13ac6116c2efd89c4ae1d32220cb836c273b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3e13e8c2ce38b386a6ebd84a9b13ac6116c2efd89c4ae1d32220cb836c273b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3e13e8c2ce38b386a6ebd84a9b13ac6116c2efd89c4ae1d32220cb836c273b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:53:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3e13e8c2ce38b386a6ebd84a9b13ac6116c2efd89c4ae1d32220cb836c273b3"}
{"level":"debug","ts":"2026-07-10T17:53:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3e13e8c2ce38b386a6ebd84a9b13ac6116c2efd89c4ae1d32220cb836c273b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:53:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3e13e8c2ce38b386a6ebd84a9b13ac6116c2efd89c4ae1d32220cb836c273b3"}
{"level":"debug","ts":"2026-07-10T17:53:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3e13e8c2ce38b386a6ebd84a9b13ac6116c2efd89c4ae1d32220cb836c273b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:53:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:53:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3e13e8c2ce38b386a6ebd84a9b13ac6116c2efd89c4ae1d32220cb836c273b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:53:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3e13e8c2ce38b386a6ebd84a9b13ac6116c2efd89c4ae1d32220cb836c273b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb71d1587e27ceb11f9102fbb315326986aa1be57c7dd3d04bc4e7f414fe907e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:53:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:53:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:53:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb71d1587e27ceb11f9102fbb315326986aa1be57c7dd3d04bc4e7f414fe907e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3e13e8c2ce38b386a6ebd84a9b13ac6116c2efd89c4ae1d32220cb836c273b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb71d1587e27ceb11f9102fbb315326986aa1be57c7dd3d04bc4e7f414fe907e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:53:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb71d1587e27ceb11f9102fbb315326986aa1be57c7dd3d04bc4e7f414fe907e"}
{"level":"debug","ts":"2026-07-10T17:53:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb71d1587e27ceb11f9102fbb315326986aa1be57c7dd3d04bc4e7f414fe907e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:53:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:53:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb71d1587e27ceb11f9102fbb315326986aa1be57c7dd3d04bc4e7f414fe907e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:53:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb71d1587e27ceb11f9102fbb315326986aa1be57c7dd3d04bc4e7f414fe907e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb71d1587e27ceb11f9102fbb315326986aa1be57c7dd3d04bc4e7f414fe907e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:53:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3e13e8c2ce38b386a6ebd84a9b13ac6116c2efd89c4ae1d32220cb836c273b3"}
{"level":"info","ts":"2026-07-10T17:53:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb71d1587e27ceb11f9102fbb315326986aa1be57c7dd3d04bc4e7f414fe907e"}
{"level":"debug","ts":"2026-07-10T17:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a9fe50b37dea316e9925c164c4d3e667cbe4c31fd1d4fd04eafb79c4edbfa96","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a9fe50b37dea316e9925c164c4d3e667cbe4c31fd1d4fd04eafb79c4edbfa96"}
{"level":"debug","ts":"2026-07-10T17:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e49d1830106dd17774362b919fc87393cdd06130726a1a2b6b4a51ff564d4161","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:53:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:53:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e49d1830106dd17774362b919fc87393cdd06130726a1a2b6b4a51ff564d4161","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e49d1830106dd17774362b919fc87393cdd06130726a1a2b6b4a51ff564d4161","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e49d1830106dd17774362b919fc87393cdd06130726a1a2b6b4a51ff564d4161","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e49d1830106dd17774362b919fc87393cdd06130726a1a2b6b4a51ff564d4161"}
{"level":"debug","ts":"2026-07-10T17:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e49d1830106dd17774362b919fc87393cdd06130726a1a2b6b4a51ff564d4161","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e49d1830106dd17774362b919fc87393cdd06130726a1a2b6b4a51ff564d4161"}
{"level":"debug","ts":"2026-07-10T17:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e49d1830106dd17774362b919fc87393cdd06130726a1a2b6b4a51ff564d4161","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:53:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:53:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e49d1830106dd17774362b919fc87393cdd06130726a1a2b6b4a51ff564d4161"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e49d1830106dd17774362b919fc87393cdd06130726a1a2b6b4a51ff564d4161","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e49d1830106dd17774362b919fc87393cdd06130726a1a2b6b4a51ff564d4161","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70bff0f96baae2143676d9c0fc28581532add8ec5b2d3900596699566d13afb8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e49d1830106dd17774362b919fc87393cdd06130726a1a2b6b4a51ff564d4161"}
{"level":"info","ts":"2026-07-10T17:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70bff0f96baae2143676d9c0fc28581532add8ec5b2d3900596699566d13afb8"}
{"level":"debug","ts":"2026-07-10T17:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48352ac43f93a0ef720e4dbc0544cea25c7523c3bcb5ee74ace8ad736a96a4fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:53:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:53:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48352ac43f93a0ef720e4dbc0544cea25c7523c3bcb5ee74ace8ad736a96a4fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48352ac43f93a0ef720e4dbc0544cea25c7523c3bcb5ee74ace8ad736a96a4fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22569a450059b7b16efd9e0bdfedf5edb095432e6276bcc2a73681e0c8a2c2bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48352ac43f93a0ef720e4dbc0544cea25c7523c3bcb5ee74ace8ad736a96a4fc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48352ac43f93a0ef720e4dbc0544cea25c7523c3bcb5ee74ace8ad736a96a4fc"}
{"level":"debug","ts":"2026-07-10T17:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48352ac43f93a0ef720e4dbc0544cea25c7523c3bcb5ee74ace8ad736a96a4fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:53:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:53:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48352ac43f93a0ef720e4dbc0544cea25c7523c3bcb5ee74ace8ad736a96a4fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22569a450059b7b16efd9e0bdfedf5edb095432e6276bcc2a73681e0c8a2c2bc"}
{"level":"info","ts":"2026-07-10T17:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48352ac43f93a0ef720e4dbc0544cea25c7523c3bcb5ee74ace8ad736a96a4fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48352ac43f93a0ef720e4dbc0544cea25c7523c3bcb5ee74ace8ad736a96a4fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:53:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:53:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48352ac43f93a0ef720e4dbc0544cea25c7523c3bcb5ee74ace8ad736a96a4fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48352ac43f93a0ef720e4dbc0544cea25c7523c3bcb5ee74ace8ad736a96a4fc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48352ac43f93a0ef720e4dbc0544cea25c7523c3bcb5ee74ace8ad736a96a4fc"}
{"level":"debug","ts":"2026-07-10T17:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48352ac43f93a0ef720e4dbc0544cea25c7523c3bcb5ee74ace8ad736a96a4fc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48352ac43f93a0ef720e4dbc0544cea25c7523c3bcb5ee74ace8ad736a96a4fc"}
{"level":"debug","ts":"2026-07-10T17:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48352ac43f93a0ef720e4dbc0544cea25c7523c3bcb5ee74ace8ad736a96a4fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:53:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:53:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48352ac43f93a0ef720e4dbc0544cea25c7523c3bcb5ee74ace8ad736a96a4fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48352ac43f93a0ef720e4dbc0544cea25c7523c3bcb5ee74ace8ad736a96a4fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48352ac43f93a0ef720e4dbc0544cea25c7523c3bcb5ee74ace8ad736a96a4fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"666c4064c80564b3583c630ddfa3ef5454d5ff954237f54e34a346468143ba9c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48352ac43f93a0ef720e4dbc0544cea25c7523c3bcb5ee74ace8ad736a96a4fc"}
{"level":"info","ts":"2026-07-10T17:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/666c4064c80564b3583c630ddfa3ef5454d5ff954237f54e34a346468143ba9c"}
{"level":"debug","ts":"2026-07-10T17:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:53:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:53:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137"}
{"level":"debug","ts":"2026-07-10T17:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137"}
{"level":"debug","ts":"2026-07-10T17:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:53:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:53:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:53:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:53:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3740e7770f63b03b610e0dd41cbb1c50227bdc414eeb9954e03ed2c328af67b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc86d4eb3e6c27ce523044c464a4a97dc25617003b6e6159d41c6e6fd59a376f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137"}
{"level":"debug","ts":"2026-07-10T17:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44986b74e95212f14a87fab3f97ef169d106d7c35ffa23704b9149693f3efbda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:53:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:53:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3740e7770f63b03b610e0dd41cbb1c50227bdc414eeb9954e03ed2c328af67b"}
{"level":"info","ts":"2026-07-10T17:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc86d4eb3e6c27ce523044c464a4a97dc25617003b6e6159d41c6e6fd59a376f"}
{"level":"info","ts":"2026-07-10T17:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137"}
{"level":"debug","ts":"2026-07-10T17:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5edeb67e7d0909164ff56c952351e057cfdfef4b061a04ca491f655af38c6fc4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44986b74e95212f14a87fab3f97ef169d106d7c35ffa23704b9149693f3efbda"}
{"level":"debug","ts":"2026-07-10T17:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2cfe30bae599a13d0ad096e345c366977da54ed88fb54d09236260055fb59ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5edeb67e7d0909164ff56c952351e057cfdfef4b061a04ca491f655af38c6fc4"}
{"level":"debug","ts":"2026-07-10T17:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88d5b0f8219c3483206029353819f9a541082a6720ced97055f2fc2c8da7b251","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"032b5f778367eb8a741f28a4f0de918770745d9bc96ad50f03d5cdc66414d68e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2cfe30bae599a13d0ad096e345c366977da54ed88fb54d09236260055fb59ab"}
{"level":"debug","ts":"2026-07-10T17:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1ee3352ba8335d3da2b6a9bec659c561d4e18ce5a9de62e196fbe1d09f2ff85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88d5b0f8219c3483206029353819f9a541082a6720ced97055f2fc2c8da7b251"}
{"level":"debug","ts":"2026-07-10T17:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a49dfabf9dd2b940273e48365e5786445f6a2ae42d60ab6b5a96f59a669d36a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/032b5f778367eb8a741f28a4f0de918770745d9bc96ad50f03d5cdc66414d68e"}
{"level":"debug","ts":"2026-07-10T17:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a72d19fb1df7be5dbd254fd3096b7419b973a8ef93faba0996992afa292a7d81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1ee3352ba8335d3da2b6a9bec659c561d4e18ce5a9de62e196fbe1d09f2ff85"}
{"level":"debug","ts":"2026-07-10T17:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb71d1587e27ceb11f9102fbb315326986aa1be57c7dd3d04bc4e7f414fe907e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a49dfabf9dd2b940273e48365e5786445f6a2ae42d60ab6b5a96f59a669d36a"}
{"level":"debug","ts":"2026-07-10T17:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fe5cfe714cee1f160623c0fcfc7d499cb3269534ec8423d716891443ee95caa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a72d19fb1df7be5dbd254fd3096b7419b973a8ef93faba0996992afa292a7d81"}
{"level":"debug","ts":"2026-07-10T17:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3e13e8c2ce38b386a6ebd84a9b13ac6116c2efd89c4ae1d32220cb836c273b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1905c217ab456dd10b0bd365bd89ee8cab40b7a6b011c11e6f44a8bbea719840","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5"}
{"level":"info","ts":"2026-07-10T17:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb71d1587e27ceb11f9102fbb315326986aa1be57c7dd3d04bc4e7f414fe907e"}
{"level":"debug","ts":"2026-07-10T17:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ad7bf3834477a5b4457de2c7edaf443b0d8a6295dc994df9977c29a5579ac57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c113bb4c59a7cb1d16bedc1f3326168b08faf9592dad1f285beeb24ebd7f7521","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fe5cfe714cee1f160623c0fcfc7d499cb3269534ec8423d716891443ee95caa"}
{"level":"info","ts":"2026-07-10T17:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3e13e8c2ce38b386a6ebd84a9b13ac6116c2efd89c4ae1d32220cb836c273b3"}
{"level":"info","ts":"2026-07-10T17:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1905c217ab456dd10b0bd365bd89ee8cab40b7a6b011c11e6f44a8bbea719840"}
{"level":"info","ts":"2026-07-10T17:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ad7bf3834477a5b4457de2c7edaf443b0d8a6295dc994df9977c29a5579ac57"}
{"level":"info","ts":"2026-07-10T17:53:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c113bb4c59a7cb1d16bedc1f3326168b08faf9592dad1f285beeb24ebd7f7521"}
{"level":"info","ts":"2026-07-10T17:53:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1fecbcc2-9243-40bf-9561-421fc84a4d6e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:47914","PortSpecifier":{"PortValue":47914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1fecbcc2-9243-40bf-9561-421fc84a4d6e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:53:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1fecbcc2-9243-40bf-9561-421fc84a4d6e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:47914","PortSpecifier":{"PortValue":47914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783706007,"nanos":816664220},"http":{"id":"1fecbcc2-9243-40bf-9561-421fc84a4d6e","method":"POST","headers":{":authority":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:53:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1fecbcc2-9243-40bf-9561-421fc84a4d6e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T17:53:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1fecbcc2-9243-40bf-9561-421fc84a4d6e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3e01e4b4-81fa-44f6-acfe-5e63bab66066","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7eaac46e-c3e2-4f3a-8cb3-07e472cf6884"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bddae96f0fc5"]}}
{"level":"debug","ts":"2026-07-10T17:53:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1fecbcc2-9243-40bf-9561-421fc84a4d6e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bddae96f0fc5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7eaac46e-c3e2-4f3a-8cb3-07e472cf6884"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3e01e4b4-81fa-44f6-acfe-5e63bab66066","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5fe5cfe714cee1f160623c0fcfc7d499cb3269534ec8423d716891443ee95caa"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:53:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1fecbcc2-9243-40bf-9561-421fc84a4d6e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1fecbcc2-9243-40bf-9561-421fc84a4d6e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1fecbcc2-9243-40bf-9561-421fc84a4d6e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1fecbcc2-9243-40bf-9561-421fc84a4d6e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T17:53:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1fecbcc2-9243-40bf-9561-421fc84a4d6e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:53:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1fecbcc2-9243-40bf-9561-421fc84a4d6e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T17:53:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1fecbcc2-9243-40bf-9561-421fc84a4d6e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:53:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1fecbcc2-9243-40bf-9561-421fc84a4d6e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:53:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"daece325-a447-436b-8196-7e29f4cf5dc1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:44012","PortSpecifier":{"PortValue":44012}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"daece325-a447-436b-8196-7e29f4cf5dc1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-9f66f0.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:53:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"daece325-a447-436b-8196-7e29f4cf5dc1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:44012","PortSpecifier":{"PortValue":44012}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783706007,"nanos":853499298},"http":{"id":"daece325-a447-436b-8196-7e29f4cf5dc1","method":"POST","headers":{":authority":"e2e-shared-b-9f66f0.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:53:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"daece325-a447-436b-8196-7e29f4cf5dc1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T17:53:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"daece325-a447-436b-8196-7e29f4cf5dc1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3e01e4b4-81fa-44f6-acfe-5e63bab66066","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7eaac46e-c3e2-4f3a-8cb3-07e472cf6884"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bddae96f0fc5"]}}
{"level":"debug","ts":"2026-07-10T17:53:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"daece325-a447-436b-8196-7e29f4cf5dc1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bddae96f0fc5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7eaac46e-c3e2-4f3a-8cb3-07e472cf6884"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3e01e4b4-81fa-44f6-acfe-5e63bab66066","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-9f66f0.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:53:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"daece325-a447-436b-8196-7e29f4cf5dc1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"daece325-a447-436b-8196-7e29f4cf5dc1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"daece325-a447-436b-8196-7e29f4cf5dc1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-9f66f0/rate-test-model-9f66f0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"daece325-a447-436b-8196-7e29f4cf5dc1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T17:53:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"daece325-a447-436b-8196-7e29f4cf5dc1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:53:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"daece325-a447-436b-8196-7e29f4cf5dc1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T17:53:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"daece325-a447-436b-8196-7e29f4cf5dc1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:53:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"daece325-a447-436b-8196-7e29f4cf5dc1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:53:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd948b3f-b7cc-4d09-b6fd-34fcdc7a51f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:47926","PortSpecifier":{"PortValue":47926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fd948b3f-b7cc-4d09-b6fd-34fcdc7a51f8","method":"POST","path":"/ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b/v1/completions","host":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:53:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd948b3f-b7cc-4d09-b6fd-34fcdc7a51f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:47926","PortSpecifier":{"PortValue":47926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783706007,"nanos":897311371},"http":{"id":"fd948b3f-b7cc-4d09-b6fd-34fcdc7a51f8","method":"POST","headers":{":authority":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:53:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fd948b3f-b7cc-4d09-b6fd-34fcdc7a51f8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-acTrTVgghkp6KewC_tjROQ5dLddUPhjUYniW3uDZvrA8A0zNtmlUlPCo9UV8"}
{"level":"debug","ts":"2026-07-10T17:53:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fd948b3f-b7cc-4d09-b6fd-34fcdc7a51f8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-acTrTVgghkp6KewC_tjROQ5dLddUPhjUYniW3uDZvrA8A0zNtmlUlPCo9UV8\"}"}
{"level":"debug","ts":"2026-07-10T17:53:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fd948b3f-b7cc-4d09-b6fd-34fcdc7a51f8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"26ea2a09-f24c-4f35-b470-d69b83ed90df","keyName":"e2e-rate-a-3f3ed4","subscription":"e2e-rate-iso-a-3f3ed4","tenant":"e2e-shared-a-3beb3b","userId":"26ea2a09-f24c-4f35-b470-d69b83ed90df","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T17:53:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fd948b3f-b7cc-4d09-b6fd-34fcdc7a51f8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b\",\"requestedSubscription\":\"e2e-rate-iso-a-3f3ed4\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T17:53:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fd948b3f-b7cc-4d09-b6fd-34fcdc7a51f8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3beb3b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3f3ed4","namespace":"ai-tenant-e2e-shared-a-3beb3b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T17:53:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fd948b3f-b7cc-4d09-b6fd-34fcdc7a51f8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:53:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd948b3f-b7cc-4d09-b6fd-34fcdc7a51f8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd948b3f-b7cc-4d09-b6fd-34fcdc7a51f8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd948b3f-b7cc-4d09-b6fd-34fcdc7a51f8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd948b3f-b7cc-4d09-b6fd-34fcdc7a51f8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd948b3f-b7cc-4d09-b6fd-34fcdc7a51f8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:53:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd948b3f-b7cc-4d09-b6fd-34fcdc7a51f8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3f3ed4"}
{"level":"debug","ts":"2026-07-10T17:53:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd948b3f-b7cc-4d09-b6fd-34fcdc7a51f8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T17:53:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd948b3f-b7cc-4d09-b6fd-34fcdc7a51f8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"26ea2a09-f24c-4f35-b470-d69b83ed90df","keyName":"e2e-rate-a-3f3ed4","selected_subscription":"e2e-rate-iso-a-3f3ed4","selected_subscription_key":"ai-tenant-e2e-shared-a-3beb3b/e2e-rate-iso-a-3f3ed4@ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3beb3b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3f3ed4","namespace":"ai-tenant-e2e-shared-a-3beb3b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T17:53:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd948b3f-b7cc-4d09-b6fd-34fcdc7a51f8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:53:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd948b3f-b7cc-4d09-b6fd-34fcdc7a51f8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:53:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4083b7cc-f1da-407c-87c1-6bed68778af4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:47930","PortSpecifier":{"PortValue":47930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4083b7cc-f1da-407c-87c1-6bed68778af4","method":"POST","path":"/ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b/v1/completions","host":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:53:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4083b7cc-f1da-407c-87c1-6bed68778af4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:47930","PortSpecifier":{"PortValue":47930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783706008,"nanos":980565144},"http":{"id":"4083b7cc-f1da-407c-87c1-6bed68778af4","method":"POST","headers":{":authority":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:53:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4083b7cc-f1da-407c-87c1-6bed68778af4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-acTrTVgghkp6KewC_tjROQ5dLddUPhjUYniW3uDZvrA8A0zNtmlUlPCo9UV8"}
{"level":"debug","ts":"2026-07-10T17:53:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4083b7cc-f1da-407c-87c1-6bed68778af4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-acTrTVgghkp6KewC_tjROQ5dLddUPhjUYniW3uDZvrA8A0zNtmlUlPCo9UV8\"}"}
{"level":"debug","ts":"2026-07-10T17:53:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4083b7cc-f1da-407c-87c1-6bed68778af4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"26ea2a09-f24c-4f35-b470-d69b83ed90df","keyName":"e2e-rate-a-3f3ed4","subscription":"e2e-rate-iso-a-3f3ed4","tenant":"e2e-shared-a-3beb3b","userId":"26ea2a09-f24c-4f35-b470-d69b83ed90df","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T17:53:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4083b7cc-f1da-407c-87c1-6bed68778af4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b\",\"requestedSubscription\":\"e2e-rate-iso-a-3f3ed4\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T17:53:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4083b7cc-f1da-407c-87c1-6bed68778af4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3beb3b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3f3ed4","namespace":"ai-tenant-e2e-shared-a-3beb3b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T17:53:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4083b7cc-f1da-407c-87c1-6bed68778af4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:53:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4083b7cc-f1da-407c-87c1-6bed68778af4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4083b7cc-f1da-407c-87c1-6bed68778af4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4083b7cc-f1da-407c-87c1-6bed68778af4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4083b7cc-f1da-407c-87c1-6bed68778af4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4083b7cc-f1da-407c-87c1-6bed68778af4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:53:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4083b7cc-f1da-407c-87c1-6bed68778af4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3f3ed4"}
{"level":"debug","ts":"2026-07-10T17:53:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4083b7cc-f1da-407c-87c1-6bed68778af4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T17:53:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4083b7cc-f1da-407c-87c1-6bed68778af4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"26ea2a09-f24c-4f35-b470-d69b83ed90df","keyName":"e2e-rate-a-3f3ed4","selected_subscription":"e2e-rate-iso-a-3f3ed4","selected_subscription_key":"ai-tenant-e2e-shared-a-3beb3b/e2e-rate-iso-a-3f3ed4@ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3beb3b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3f3ed4","namespace":"ai-tenant-e2e-shared-a-3beb3b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T17:53:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4083b7cc-f1da-407c-87c1-6bed68778af4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:53:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4083b7cc-f1da-407c-87c1-6bed68778af4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:53:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a7672cb4-f2bc-4c19-85f1-5c29181b57da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:47934","PortSpecifier":{"PortValue":47934}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a7672cb4-f2bc-4c19-85f1-5c29181b57da","method":"POST","path":"/ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b/v1/completions","host":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:53:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a7672cb4-f2bc-4c19-85f1-5c29181b57da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:47934","PortSpecifier":{"PortValue":47934}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783706010,"nanos":22742221},"http":{"id":"a7672cb4-f2bc-4c19-85f1-5c29181b57da","method":"POST","headers":{":authority":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:53:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a7672cb4-f2bc-4c19-85f1-5c29181b57da","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-acTrTVgghkp6KewC_tjROQ5dLddUPhjUYniW3uDZvrA8A0zNtmlUlPCo9UV8"}
{"level":"debug","ts":"2026-07-10T17:53:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a7672cb4-f2bc-4c19-85f1-5c29181b57da","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-acTrTVgghkp6KewC_tjROQ5dLddUPhjUYniW3uDZvrA8A0zNtmlUlPCo9UV8\"}"}
{"level":"debug","ts":"2026-07-10T17:53:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a7672cb4-f2bc-4c19-85f1-5c29181b57da","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"26ea2a09-f24c-4f35-b470-d69b83ed90df","keyName":"e2e-rate-a-3f3ed4","subscription":"e2e-rate-iso-a-3f3ed4","tenant":"e2e-shared-a-3beb3b","userId":"26ea2a09-f24c-4f35-b470-d69b83ed90df","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T17:53:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a7672cb4-f2bc-4c19-85f1-5c29181b57da","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b\",\"requestedSubscription\":\"e2e-rate-iso-a-3f3ed4\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T17:53:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a7672cb4-f2bc-4c19-85f1-5c29181b57da","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3beb3b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3f3ed4","namespace":"ai-tenant-e2e-shared-a-3beb3b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T17:53:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a7672cb4-f2bc-4c19-85f1-5c29181b57da","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:53:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7672cb4-f2bc-4c19-85f1-5c29181b57da","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7672cb4-f2bc-4c19-85f1-5c29181b57da","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7672cb4-f2bc-4c19-85f1-5c29181b57da","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7672cb4-f2bc-4c19-85f1-5c29181b57da","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7672cb4-f2bc-4c19-85f1-5c29181b57da","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:53:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7672cb4-f2bc-4c19-85f1-5c29181b57da","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3f3ed4"}
{"level":"debug","ts":"2026-07-10T17:53:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7672cb4-f2bc-4c19-85f1-5c29181b57da","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T17:53:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7672cb4-f2bc-4c19-85f1-5c29181b57da","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"26ea2a09-f24c-4f35-b470-d69b83ed90df","keyName":"e2e-rate-a-3f3ed4","selected_subscription":"e2e-rate-iso-a-3f3ed4","selected_subscription_key":"ai-tenant-e2e-shared-a-3beb3b/e2e-rate-iso-a-3f3ed4@ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3beb3b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3f3ed4","namespace":"ai-tenant-e2e-shared-a-3beb3b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T17:53:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a7672cb4-f2bc-4c19-85f1-5c29181b57da","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:53:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a7672cb4-f2bc-4c19-85f1-5c29181b57da","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:53:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6a8a4ee-c346-47b2-8011-fc9c1614b510","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:59168","PortSpecifier":{"PortValue":59168}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d6a8a4ee-c346-47b2-8011-fc9c1614b510","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:53:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6a8a4ee-c346-47b2-8011-fc9c1614b510","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:59168","PortSpecifier":{"PortValue":59168}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783706018,"nanos":589826949},"http":{"id":"d6a8a4ee-c346-47b2-8011-fc9c1614b510","method":"POST","headers":{":authority":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:53:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d6a8a4ee-c346-47b2-8011-fc9c1614b510","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T17:53:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d6a8a4ee-c346-47b2-8011-fc9c1614b510","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3e01e4b4-81fa-44f6-acfe-5e63bab66066","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7eaac46e-c3e2-4f3a-8cb3-07e472cf6884"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bddae96f0fc5"]}}
{"level":"debug","ts":"2026-07-10T17:53:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d6a8a4ee-c346-47b2-8011-fc9c1614b510","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bddae96f0fc5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7eaac46e-c3e2-4f3a-8cb3-07e472cf6884"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3e01e4b4-81fa-44f6-acfe-5e63bab66066","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5fe5cfe714cee1f160623c0fcfc7d499cb3269534ec8423d716891443ee95caa"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:53:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6a8a4ee-c346-47b2-8011-fc9c1614b510","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6a8a4ee-c346-47b2-8011-fc9c1614b510","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6a8a4ee-c346-47b2-8011-fc9c1614b510","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d6a8a4ee-c346-47b2-8011-fc9c1614b510","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T17:53:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6a8a4ee-c346-47b2-8011-fc9c1614b510","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:53:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6a8a4ee-c346-47b2-8011-fc9c1614b510","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T17:53:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6a8a4ee-c346-47b2-8011-fc9c1614b510","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:53:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6a8a4ee-c346-47b2-8011-fc9c1614b510","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:53:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"525e05f1-74d9-43ff-9d34-b724127bbb84","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:52060","PortSpecifier":{"PortValue":52060}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"525e05f1-74d9-43ff-9d34-b724127bbb84","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-9f66f0.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:53:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"525e05f1-74d9-43ff-9d34-b724127bbb84","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:52060","PortSpecifier":{"PortValue":52060}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783706018,"nanos":626302822},"http":{"id":"525e05f1-74d9-43ff-9d34-b724127bbb84","method":"POST","headers":{":authority":"e2e-shared-b-9f66f0.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:53:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"525e05f1-74d9-43ff-9d34-b724127bbb84","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T17:53:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"525e05f1-74d9-43ff-9d34-b724127bbb84","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3e01e4b4-81fa-44f6-acfe-5e63bab66066","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7eaac46e-c3e2-4f3a-8cb3-07e472cf6884"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bddae96f0fc5"]}}
{"level":"debug","ts":"2026-07-10T17:53:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"525e05f1-74d9-43ff-9d34-b724127bbb84","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bddae96f0fc5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7eaac46e-c3e2-4f3a-8cb3-07e472cf6884"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3e01e4b4-81fa-44f6-acfe-5e63bab66066","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-9f66f0.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:53:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"525e05f1-74d9-43ff-9d34-b724127bbb84","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"525e05f1-74d9-43ff-9d34-b724127bbb84","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"525e05f1-74d9-43ff-9d34-b724127bbb84","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-9f66f0/rate-test-model-9f66f0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"525e05f1-74d9-43ff-9d34-b724127bbb84","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T17:53:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"525e05f1-74d9-43ff-9d34-b724127bbb84","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T17:53:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"525e05f1-74d9-43ff-9d34-b724127bbb84","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T17:53:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"525e05f1-74d9-43ff-9d34-b724127bbb84","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:53:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"525e05f1-74d9-43ff-9d34-b724127bbb84","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:53:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ac4c702-9d35-4ff9-b657-0082de925b0b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:59176","PortSpecifier":{"PortValue":59176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8ac4c702-9d35-4ff9-b657-0082de925b0b","method":"POST","path":"/ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b/v1/completions","host":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:53:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ac4c702-9d35-4ff9-b657-0082de925b0b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:59176","PortSpecifier":{"PortValue":59176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783706018,"nanos":663098802},"http":{"id":"8ac4c702-9d35-4ff9-b657-0082de925b0b","method":"POST","headers":{":authority":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:53:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8ac4c702-9d35-4ff9-b657-0082de925b0b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1FSQGECSCZef7jWLi_RoUFva7OcGW2Udt75zdyMQV1BWBRRz0muHjVRWwggho"}
{"level":"debug","ts":"2026-07-10T17:53:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8ac4c702-9d35-4ff9-b657-0082de925b0b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1FSQGECSCZef7jWLi_RoUFva7OcGW2Udt75zdyMQV1BWBRRz0muHjVRWwggho\"}"}
{"level":"debug","ts":"2026-07-10T17:53:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8ac4c702-9d35-4ff9-b657-0082de925b0b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"866eaebd-ec24-4468-be1c-55437d4977d2","keyName":"e2e-rate-a-6ac59f","subscription":"e2e-rate-iso-a-6ac59f","tenant":"e2e-shared-a-3beb3b","userId":"866eaebd-ec24-4468-be1c-55437d4977d2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T17:53:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8ac4c702-9d35-4ff9-b657-0082de925b0b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b\",\"requestedSubscription\":\"e2e-rate-iso-a-6ac59f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T17:53:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8ac4c702-9d35-4ff9-b657-0082de925b0b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3beb3b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6ac59f","namespace":"ai-tenant-e2e-shared-a-3beb3b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T17:53:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8ac4c702-9d35-4ff9-b657-0082de925b0b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:53:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ac4c702-9d35-4ff9-b657-0082de925b0b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ac4c702-9d35-4ff9-b657-0082de925b0b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ac4c702-9d35-4ff9-b657-0082de925b0b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ac4c702-9d35-4ff9-b657-0082de925b0b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ac4c702-9d35-4ff9-b657-0082de925b0b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:53:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ac4c702-9d35-4ff9-b657-0082de925b0b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6ac59f"}
{"level":"debug","ts":"2026-07-10T17:53:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ac4c702-9d35-4ff9-b657-0082de925b0b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T17:53:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ac4c702-9d35-4ff9-b657-0082de925b0b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"866eaebd-ec24-4468-be1c-55437d4977d2","keyName":"e2e-rate-a-6ac59f","selected_subscription":"e2e-rate-iso-a-6ac59f","selected_subscription_key":"ai-tenant-e2e-shared-a-3beb3b/e2e-rate-iso-a-6ac59f@ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3beb3b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6ac59f","namespace":"ai-tenant-e2e-shared-a-3beb3b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T17:53:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ac4c702-9d35-4ff9-b657-0082de925b0b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:53:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ac4c702-9d35-4ff9-b657-0082de925b0b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:53:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0badbba2-6bd7-4450-812d-f43f7b872908","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:59192","PortSpecifier":{"PortValue":59192}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0badbba2-6bd7-4450-812d-f43f7b872908","method":"POST","path":"/ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b/v1/completions","host":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:53:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0badbba2-6bd7-4450-812d-f43f7b872908","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:59192","PortSpecifier":{"PortValue":59192}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783706019,"nanos":697668677},"http":{"id":"0badbba2-6bd7-4450-812d-f43f7b872908","method":"POST","headers":{":authority":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:53:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0badbba2-6bd7-4450-812d-f43f7b872908","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1FSQGECSCZef7jWLi_RoUFva7OcGW2Udt75zdyMQV1BWBRRz0muHjVRWwggho"}
{"level":"debug","ts":"2026-07-10T17:53:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0badbba2-6bd7-4450-812d-f43f7b872908","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1FSQGECSCZef7jWLi_RoUFva7OcGW2Udt75zdyMQV1BWBRRz0muHjVRWwggho\"}"}
{"level":"debug","ts":"2026-07-10T17:53:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0badbba2-6bd7-4450-812d-f43f7b872908","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"866eaebd-ec24-4468-be1c-55437d4977d2","keyName":"e2e-rate-a-6ac59f","subscription":"e2e-rate-iso-a-6ac59f","tenant":"e2e-shared-a-3beb3b","userId":"866eaebd-ec24-4468-be1c-55437d4977d2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T17:53:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0badbba2-6bd7-4450-812d-f43f7b872908","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b\",\"requestedSubscription\":\"e2e-rate-iso-a-6ac59f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T17:53:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0badbba2-6bd7-4450-812d-f43f7b872908","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3beb3b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6ac59f","namespace":"ai-tenant-e2e-shared-a-3beb3b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T17:53:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0badbba2-6bd7-4450-812d-f43f7b872908","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:53:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0badbba2-6bd7-4450-812d-f43f7b872908","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0badbba2-6bd7-4450-812d-f43f7b872908","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0badbba2-6bd7-4450-812d-f43f7b872908","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0badbba2-6bd7-4450-812d-f43f7b872908","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0badbba2-6bd7-4450-812d-f43f7b872908","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T17:53:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0badbba2-6bd7-4450-812d-f43f7b872908","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:53:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0badbba2-6bd7-4450-812d-f43f7b872908","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6ac59f"}
{"level":"debug","ts":"2026-07-10T17:53:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0badbba2-6bd7-4450-812d-f43f7b872908","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"866eaebd-ec24-4468-be1c-55437d4977d2","keyName":"e2e-rate-a-6ac59f","selected_subscription":"e2e-rate-iso-a-6ac59f","selected_subscription_key":"ai-tenant-e2e-shared-a-3beb3b/e2e-rate-iso-a-6ac59f@ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3beb3b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6ac59f","namespace":"ai-tenant-e2e-shared-a-3beb3b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T17:53:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0badbba2-6bd7-4450-812d-f43f7b872908","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:53:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0badbba2-6bd7-4450-812d-f43f7b872908","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:53:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ef97a3f-ad45-41cf-ac74-403cccafe2a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:59200","PortSpecifier":{"PortValue":59200}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3ef97a3f-ad45-41cf-ac74-403cccafe2a0","method":"POST","path":"/ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b/v1/completions","host":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:53:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ef97a3f-ad45-41cf-ac74-403cccafe2a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:59200","PortSpecifier":{"PortValue":59200}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783706020,"nanos":733491594},"http":{"id":"3ef97a3f-ad45-41cf-ac74-403cccafe2a0","method":"POST","headers":{":authority":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:53:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3ef97a3f-ad45-41cf-ac74-403cccafe2a0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1FSQGECSCZef7jWLi_RoUFva7OcGW2Udt75zdyMQV1BWBRRz0muHjVRWwggho"}
{"level":"debug","ts":"2026-07-10T17:53:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3ef97a3f-ad45-41cf-ac74-403cccafe2a0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1FSQGECSCZef7jWLi_RoUFva7OcGW2Udt75zdyMQV1BWBRRz0muHjVRWwggho\"}"}
{"level":"debug","ts":"2026-07-10T17:53:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3ef97a3f-ad45-41cf-ac74-403cccafe2a0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"866eaebd-ec24-4468-be1c-55437d4977d2","keyName":"e2e-rate-a-6ac59f","subscription":"e2e-rate-iso-a-6ac59f","tenant":"e2e-shared-a-3beb3b","userId":"866eaebd-ec24-4468-be1c-55437d4977d2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T17:53:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3ef97a3f-ad45-41cf-ac74-403cccafe2a0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b\",\"requestedSubscription\":\"e2e-rate-iso-a-6ac59f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T17:53:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3ef97a3f-ad45-41cf-ac74-403cccafe2a0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3beb3b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6ac59f","namespace":"ai-tenant-e2e-shared-a-3beb3b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T17:53:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3ef97a3f-ad45-41cf-ac74-403cccafe2a0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:53:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ef97a3f-ad45-41cf-ac74-403cccafe2a0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ef97a3f-ad45-41cf-ac74-403cccafe2a0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ef97a3f-ad45-41cf-ac74-403cccafe2a0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ef97a3f-ad45-41cf-ac74-403cccafe2a0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ef97a3f-ad45-41cf-ac74-403cccafe2a0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:53:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ef97a3f-ad45-41cf-ac74-403cccafe2a0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T17:53:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ef97a3f-ad45-41cf-ac74-403cccafe2a0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6ac59f"}
{"level":"debug","ts":"2026-07-10T17:53:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ef97a3f-ad45-41cf-ac74-403cccafe2a0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"866eaebd-ec24-4468-be1c-55437d4977d2","keyName":"e2e-rate-a-6ac59f","selected_subscription":"e2e-rate-iso-a-6ac59f","selected_subscription_key":"ai-tenant-e2e-shared-a-3beb3b/e2e-rate-iso-a-6ac59f@ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3beb3b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6ac59f","namespace":"ai-tenant-e2e-shared-a-3beb3b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T17:53:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ef97a3f-ad45-41cf-ac74-403cccafe2a0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:53:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ef97a3f-ad45-41cf-ac74-403cccafe2a0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:53:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a1f1cc77-fc44-4cb1-bfdc-2781c79aae52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:59202","PortSpecifier":{"PortValue":59202}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a1f1cc77-fc44-4cb1-bfdc-2781c79aae52","method":"POST","path":"/ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b/v1/completions","host":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:53:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a1f1cc77-fc44-4cb1-bfdc-2781c79aae52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:59202","PortSpecifier":{"PortValue":59202}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783706021,"nanos":768079757},"http":{"id":"a1f1cc77-fc44-4cb1-bfdc-2781c79aae52","method":"POST","headers":{":authority":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:53:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a1f1cc77-fc44-4cb1-bfdc-2781c79aae52","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1FSQGECSCZef7jWLi_RoUFva7OcGW2Udt75zdyMQV1BWBRRz0muHjVRWwggho"}
{"level":"debug","ts":"2026-07-10T17:53:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a1f1cc77-fc44-4cb1-bfdc-2781c79aae52","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1FSQGECSCZef7jWLi_RoUFva7OcGW2Udt75zdyMQV1BWBRRz0muHjVRWwggho\"}"}
{"level":"debug","ts":"2026-07-10T17:53:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a1f1cc77-fc44-4cb1-bfdc-2781c79aae52","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"866eaebd-ec24-4468-be1c-55437d4977d2","keyName":"e2e-rate-a-6ac59f","subscription":"e2e-rate-iso-a-6ac59f","tenant":"e2e-shared-a-3beb3b","userId":"866eaebd-ec24-4468-be1c-55437d4977d2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T17:53:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a1f1cc77-fc44-4cb1-bfdc-2781c79aae52","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b\",\"requestedSubscription\":\"e2e-rate-iso-a-6ac59f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T17:53:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a1f1cc77-fc44-4cb1-bfdc-2781c79aae52","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3beb3b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6ac59f","namespace":"ai-tenant-e2e-shared-a-3beb3b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T17:53:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a1f1cc77-fc44-4cb1-bfdc-2781c79aae52","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:53:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1f1cc77-fc44-4cb1-bfdc-2781c79aae52","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1f1cc77-fc44-4cb1-bfdc-2781c79aae52","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1f1cc77-fc44-4cb1-bfdc-2781c79aae52","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1f1cc77-fc44-4cb1-bfdc-2781c79aae52","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1f1cc77-fc44-4cb1-bfdc-2781c79aae52","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6ac59f"}
{"level":"debug","ts":"2026-07-10T17:53:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1f1cc77-fc44-4cb1-bfdc-2781c79aae52","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:53:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1f1cc77-fc44-4cb1-bfdc-2781c79aae52","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T17:53:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1f1cc77-fc44-4cb1-bfdc-2781c79aae52","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"866eaebd-ec24-4468-be1c-55437d4977d2","keyName":"e2e-rate-a-6ac59f","selected_subscription":"e2e-rate-iso-a-6ac59f","selected_subscription_key":"ai-tenant-e2e-shared-a-3beb3b/e2e-rate-iso-a-6ac59f@ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3beb3b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6ac59f","namespace":"ai-tenant-e2e-shared-a-3beb3b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T17:53:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a1f1cc77-fc44-4cb1-bfdc-2781c79aae52","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:53:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a1f1cc77-fc44-4cb1-bfdc-2781c79aae52","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:53:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5fdc20e5-c727-4f36-bde3-9bab1f154022","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:59204","PortSpecifier":{"PortValue":59204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5fdc20e5-c727-4f36-bde3-9bab1f154022","method":"POST","path":"/ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b/v1/completions","host":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:53:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5fdc20e5-c727-4f36-bde3-9bab1f154022","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:59204","PortSpecifier":{"PortValue":59204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783706022,"nanos":807814410},"http":{"id":"5fdc20e5-c727-4f36-bde3-9bab1f154022","method":"POST","headers":{":authority":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:53:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5fdc20e5-c727-4f36-bde3-9bab1f154022","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1FSQGECSCZef7jWLi_RoUFva7OcGW2Udt75zdyMQV1BWBRRz0muHjVRWwggho"}
{"level":"debug","ts":"2026-07-10T17:53:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5fdc20e5-c727-4f36-bde3-9bab1f154022","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1FSQGECSCZef7jWLi_RoUFva7OcGW2Udt75zdyMQV1BWBRRz0muHjVRWwggho\"}"}
{"level":"debug","ts":"2026-07-10T17:53:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5fdc20e5-c727-4f36-bde3-9bab1f154022","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"866eaebd-ec24-4468-be1c-55437d4977d2","keyName":"e2e-rate-a-6ac59f","subscription":"e2e-rate-iso-a-6ac59f","tenant":"e2e-shared-a-3beb3b","userId":"866eaebd-ec24-4468-be1c-55437d4977d2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T17:53:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5fdc20e5-c727-4f36-bde3-9bab1f154022","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b\",\"requestedSubscription\":\"e2e-rate-iso-a-6ac59f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T17:53:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5fdc20e5-c727-4f36-bde3-9bab1f154022","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3beb3b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6ac59f","namespace":"ai-tenant-e2e-shared-a-3beb3b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T17:53:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5fdc20e5-c727-4f36-bde3-9bab1f154022","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:53:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5fdc20e5-c727-4f36-bde3-9bab1f154022","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5fdc20e5-c727-4f36-bde3-9bab1f154022","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5fdc20e5-c727-4f36-bde3-9bab1f154022","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5fdc20e5-c727-4f36-bde3-9bab1f154022","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5fdc20e5-c727-4f36-bde3-9bab1f154022","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:53:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5fdc20e5-c727-4f36-bde3-9bab1f154022","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6ac59f"}
{"level":"debug","ts":"2026-07-10T17:53:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5fdc20e5-c727-4f36-bde3-9bab1f154022","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T17:53:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5fdc20e5-c727-4f36-bde3-9bab1f154022","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"866eaebd-ec24-4468-be1c-55437d4977d2","keyName":"e2e-rate-a-6ac59f","selected_subscription":"e2e-rate-iso-a-6ac59f","selected_subscription_key":"ai-tenant-e2e-shared-a-3beb3b/e2e-rate-iso-a-6ac59f@ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3beb3b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6ac59f","namespace":"ai-tenant-e2e-shared-a-3beb3b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T17:53:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5fdc20e5-c727-4f36-bde3-9bab1f154022","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:53:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5fdc20e5-c727-4f36-bde3-9bab1f154022","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:53:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2501f70f-5f26-4b7b-9bfb-e8de785afeba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:59216","PortSpecifier":{"PortValue":59216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2501f70f-5f26-4b7b-9bfb-e8de785afeba","method":"POST","path":"/ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b/v1/completions","host":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:53:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2501f70f-5f26-4b7b-9bfb-e8de785afeba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:59216","PortSpecifier":{"PortValue":59216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783706023,"nanos":842692185},"http":{"id":"2501f70f-5f26-4b7b-9bfb-e8de785afeba","method":"POST","headers":{":authority":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:53:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2501f70f-5f26-4b7b-9bfb-e8de785afeba","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1FSQGECSCZef7jWLi_RoUFva7OcGW2Udt75zdyMQV1BWBRRz0muHjVRWwggho"}
{"level":"debug","ts":"2026-07-10T17:53:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2501f70f-5f26-4b7b-9bfb-e8de785afeba","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1FSQGECSCZef7jWLi_RoUFva7OcGW2Udt75zdyMQV1BWBRRz0muHjVRWwggho\"}"}
{"level":"debug","ts":"2026-07-10T17:53:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2501f70f-5f26-4b7b-9bfb-e8de785afeba","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"866eaebd-ec24-4468-be1c-55437d4977d2","keyName":"e2e-rate-a-6ac59f","subscription":"e2e-rate-iso-a-6ac59f","tenant":"e2e-shared-a-3beb3b","userId":"866eaebd-ec24-4468-be1c-55437d4977d2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T17:53:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2501f70f-5f26-4b7b-9bfb-e8de785afeba","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b\",\"requestedSubscription\":\"e2e-rate-iso-a-6ac59f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T17:53:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2501f70f-5f26-4b7b-9bfb-e8de785afeba","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3beb3b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6ac59f","namespace":"ai-tenant-e2e-shared-a-3beb3b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T17:53:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2501f70f-5f26-4b7b-9bfb-e8de785afeba","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:53:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2501f70f-5f26-4b7b-9bfb-e8de785afeba","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2501f70f-5f26-4b7b-9bfb-e8de785afeba","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2501f70f-5f26-4b7b-9bfb-e8de785afeba","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2501f70f-5f26-4b7b-9bfb-e8de785afeba","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2501f70f-5f26-4b7b-9bfb-e8de785afeba","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:53:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2501f70f-5f26-4b7b-9bfb-e8de785afeba","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6ac59f"}
{"level":"debug","ts":"2026-07-10T17:53:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2501f70f-5f26-4b7b-9bfb-e8de785afeba","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T17:53:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2501f70f-5f26-4b7b-9bfb-e8de785afeba","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"866eaebd-ec24-4468-be1c-55437d4977d2","keyName":"e2e-rate-a-6ac59f","selected_subscription":"e2e-rate-iso-a-6ac59f","selected_subscription_key":"ai-tenant-e2e-shared-a-3beb3b/e2e-rate-iso-a-6ac59f@ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3beb3b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6ac59f","namespace":"ai-tenant-e2e-shared-a-3beb3b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T17:53:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2501f70f-5f26-4b7b-9bfb-e8de785afeba","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:53:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2501f70f-5f26-4b7b-9bfb-e8de785afeba","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:53:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"22dbfce2-eb17-4f3e-ae7b-c35a06beb64c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:42956","PortSpecifier":{"PortValue":42956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"22dbfce2-eb17-4f3e-ae7b-c35a06beb64c","method":"POST","path":"/ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b/v1/completions","host":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:53:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"22dbfce2-eb17-4f3e-ae7b-c35a06beb64c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:42956","PortSpecifier":{"PortValue":42956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783706024,"nanos":878503465},"http":{"id":"22dbfce2-eb17-4f3e-ae7b-c35a06beb64c","method":"POST","headers":{":authority":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:53:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"22dbfce2-eb17-4f3e-ae7b-c35a06beb64c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1FSQGECSCZef7jWLi_RoUFva7OcGW2Udt75zdyMQV1BWBRRz0muHjVRWwggho"}
{"level":"debug","ts":"2026-07-10T17:53:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"22dbfce2-eb17-4f3e-ae7b-c35a06beb64c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1FSQGECSCZef7jWLi_RoUFva7OcGW2Udt75zdyMQV1BWBRRz0muHjVRWwggho\"}"}
{"level":"debug","ts":"2026-07-10T17:53:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"22dbfce2-eb17-4f3e-ae7b-c35a06beb64c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"866eaebd-ec24-4468-be1c-55437d4977d2","keyName":"e2e-rate-a-6ac59f","subscription":"e2e-rate-iso-a-6ac59f","tenant":"e2e-shared-a-3beb3b","userId":"866eaebd-ec24-4468-be1c-55437d4977d2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T17:53:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"22dbfce2-eb17-4f3e-ae7b-c35a06beb64c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b\",\"requestedSubscription\":\"e2e-rate-iso-a-6ac59f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T17:53:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"22dbfce2-eb17-4f3e-ae7b-c35a06beb64c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3beb3b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6ac59f","namespace":"ai-tenant-e2e-shared-a-3beb3b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T17:53:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"22dbfce2-eb17-4f3e-ae7b-c35a06beb64c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:53:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22dbfce2-eb17-4f3e-ae7b-c35a06beb64c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22dbfce2-eb17-4f3e-ae7b-c35a06beb64c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22dbfce2-eb17-4f3e-ae7b-c35a06beb64c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22dbfce2-eb17-4f3e-ae7b-c35a06beb64c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22dbfce2-eb17-4f3e-ae7b-c35a06beb64c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:53:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22dbfce2-eb17-4f3e-ae7b-c35a06beb64c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T17:53:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22dbfce2-eb17-4f3e-ae7b-c35a06beb64c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6ac59f"}
{"level":"debug","ts":"2026-07-10T17:53:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22dbfce2-eb17-4f3e-ae7b-c35a06beb64c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"866eaebd-ec24-4468-be1c-55437d4977d2","keyName":"e2e-rate-a-6ac59f","selected_subscription":"e2e-rate-iso-a-6ac59f","selected_subscription_key":"ai-tenant-e2e-shared-a-3beb3b/e2e-rate-iso-a-6ac59f@ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3beb3b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6ac59f","namespace":"ai-tenant-e2e-shared-a-3beb3b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T17:53:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"22dbfce2-eb17-4f3e-ae7b-c35a06beb64c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:53:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"22dbfce2-eb17-4f3e-ae7b-c35a06beb64c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:53:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09dc02bd-7817-4457-90ea-0982f7706f04","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:42970","PortSpecifier":{"PortValue":42970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"09dc02bd-7817-4457-90ea-0982f7706f04","method":"POST","path":"/ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b/v1/completions","host":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:53:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09dc02bd-7817-4457-90ea-0982f7706f04","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:42970","PortSpecifier":{"PortValue":42970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783706025,"nanos":910366200},"http":{"id":"09dc02bd-7817-4457-90ea-0982f7706f04","method":"POST","headers":{":authority":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:53:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"09dc02bd-7817-4457-90ea-0982f7706f04","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1FSQGECSCZef7jWLi_RoUFva7OcGW2Udt75zdyMQV1BWBRRz0muHjVRWwggho"}
{"level":"debug","ts":"2026-07-10T17:53:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"09dc02bd-7817-4457-90ea-0982f7706f04","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1FSQGECSCZef7jWLi_RoUFva7OcGW2Udt75zdyMQV1BWBRRz0muHjVRWwggho\"}"}
{"level":"debug","ts":"2026-07-10T17:53:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"09dc02bd-7817-4457-90ea-0982f7706f04","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"866eaebd-ec24-4468-be1c-55437d4977d2","keyName":"e2e-rate-a-6ac59f","subscription":"e2e-rate-iso-a-6ac59f","tenant":"e2e-shared-a-3beb3b","userId":"866eaebd-ec24-4468-be1c-55437d4977d2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T17:53:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"09dc02bd-7817-4457-90ea-0982f7706f04","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b\",\"requestedSubscription\":\"e2e-rate-iso-a-6ac59f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T17:53:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"09dc02bd-7817-4457-90ea-0982f7706f04","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3beb3b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6ac59f","namespace":"ai-tenant-e2e-shared-a-3beb3b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T17:53:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"09dc02bd-7817-4457-90ea-0982f7706f04","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:53:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09dc02bd-7817-4457-90ea-0982f7706f04","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09dc02bd-7817-4457-90ea-0982f7706f04","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09dc02bd-7817-4457-90ea-0982f7706f04","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09dc02bd-7817-4457-90ea-0982f7706f04","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09dc02bd-7817-4457-90ea-0982f7706f04","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:53:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09dc02bd-7817-4457-90ea-0982f7706f04","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T17:53:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09dc02bd-7817-4457-90ea-0982f7706f04","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6ac59f"}
{"level":"debug","ts":"2026-07-10T17:53:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09dc02bd-7817-4457-90ea-0982f7706f04","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"866eaebd-ec24-4468-be1c-55437d4977d2","keyName":"e2e-rate-a-6ac59f","selected_subscription":"e2e-rate-iso-a-6ac59f","selected_subscription_key":"ai-tenant-e2e-shared-a-3beb3b/e2e-rate-iso-a-6ac59f@ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3beb3b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6ac59f","namespace":"ai-tenant-e2e-shared-a-3beb3b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T17:53:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09dc02bd-7817-4457-90ea-0982f7706f04","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:53:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09dc02bd-7817-4457-90ea-0982f7706f04","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:53:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37b362c3-ac54-419c-bdd7-ca57a73fc676","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:42972","PortSpecifier":{"PortValue":42972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"37b362c3-ac54-419c-bdd7-ca57a73fc676","method":"POST","path":"/ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b/v1/completions","host":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:53:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37b362c3-ac54-419c-bdd7-ca57a73fc676","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:42972","PortSpecifier":{"PortValue":42972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783706026,"nanos":954287741},"http":{"id":"37b362c3-ac54-419c-bdd7-ca57a73fc676","method":"POST","headers":{":authority":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:53:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"37b362c3-ac54-419c-bdd7-ca57a73fc676","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1FSQGECSCZef7jWLi_RoUFva7OcGW2Udt75zdyMQV1BWBRRz0muHjVRWwggho"}
{"level":"debug","ts":"2026-07-10T17:53:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"37b362c3-ac54-419c-bdd7-ca57a73fc676","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1FSQGECSCZef7jWLi_RoUFva7OcGW2Udt75zdyMQV1BWBRRz0muHjVRWwggho\"}"}
{"level":"debug","ts":"2026-07-10T17:53:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"37b362c3-ac54-419c-bdd7-ca57a73fc676","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"866eaebd-ec24-4468-be1c-55437d4977d2","keyName":"e2e-rate-a-6ac59f","subscription":"e2e-rate-iso-a-6ac59f","tenant":"e2e-shared-a-3beb3b","userId":"866eaebd-ec24-4468-be1c-55437d4977d2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T17:53:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"37b362c3-ac54-419c-bdd7-ca57a73fc676","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b\",\"requestedSubscription\":\"e2e-rate-iso-a-6ac59f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T17:53:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"37b362c3-ac54-419c-bdd7-ca57a73fc676","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3beb3b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6ac59f","namespace":"ai-tenant-e2e-shared-a-3beb3b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T17:53:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"37b362c3-ac54-419c-bdd7-ca57a73fc676","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:53:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37b362c3-ac54-419c-bdd7-ca57a73fc676","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37b362c3-ac54-419c-bdd7-ca57a73fc676","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37b362c3-ac54-419c-bdd7-ca57a73fc676","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37b362c3-ac54-419c-bdd7-ca57a73fc676","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37b362c3-ac54-419c-bdd7-ca57a73fc676","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:53:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37b362c3-ac54-419c-bdd7-ca57a73fc676","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6ac59f"}
{"level":"debug","ts":"2026-07-10T17:53:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37b362c3-ac54-419c-bdd7-ca57a73fc676","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T17:53:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37b362c3-ac54-419c-bdd7-ca57a73fc676","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"866eaebd-ec24-4468-be1c-55437d4977d2","keyName":"e2e-rate-a-6ac59f","selected_subscription":"e2e-rate-iso-a-6ac59f","selected_subscription_key":"ai-tenant-e2e-shared-a-3beb3b/e2e-rate-iso-a-6ac59f@ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3beb3b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6ac59f","namespace":"ai-tenant-e2e-shared-a-3beb3b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T17:53:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37b362c3-ac54-419c-bdd7-ca57a73fc676","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:53:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37b362c3-ac54-419c-bdd7-ca57a73fc676","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:53:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"321020ea-4041-4581-924e-0e16df653a6d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:42976","PortSpecifier":{"PortValue":42976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"321020ea-4041-4581-924e-0e16df653a6d","method":"POST","path":"/ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b/v1/completions","host":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:53:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"321020ea-4041-4581-924e-0e16df653a6d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:42976","PortSpecifier":{"PortValue":42976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783706027,"nanos":991615703},"http":{"id":"321020ea-4041-4581-924e-0e16df653a6d","method":"POST","headers":{":authority":"e2e-shared-a-3beb3b.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:53:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"321020ea-4041-4581-924e-0e16df653a6d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1FSQGECSCZef7jWLi_RoUFva7OcGW2Udt75zdyMQV1BWBRRz0muHjVRWwggho"}
{"level":"debug","ts":"2026-07-10T17:53:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"321020ea-4041-4581-924e-0e16df653a6d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1FSQGECSCZef7jWLi_RoUFva7OcGW2Udt75zdyMQV1BWBRRz0muHjVRWwggho\"}"}
{"level":"debug","ts":"2026-07-10T17:53:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"321020ea-4041-4581-924e-0e16df653a6d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"866eaebd-ec24-4468-be1c-55437d4977d2","keyName":"e2e-rate-a-6ac59f","subscription":"e2e-rate-iso-a-6ac59f","tenant":"e2e-shared-a-3beb3b","userId":"866eaebd-ec24-4468-be1c-55437d4977d2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T17:53:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"321020ea-4041-4581-924e-0e16df653a6d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b\",\"requestedSubscription\":\"e2e-rate-iso-a-6ac59f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T17:53:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"321020ea-4041-4581-924e-0e16df653a6d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3beb3b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3beb3b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6ac59f","namespace":"ai-tenant-e2e-shared-a-3beb3b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T17:53:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"321020ea-4041-4581-924e-0e16df653a6d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:53:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"321020ea-4041-4581-924e-0e16df653a6d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"321020ea-4041-4581-924e-0e16df653a6d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"321020ea-4041-4581-924e-0e16df653a6d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"321020ea-4041-4581-924e-0e16df653a6d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"321020ea-4041-4581-924e-0e16df653a6d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6ac59f"}
{"level":"debug","ts":"2026-07-10T17:53:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"321020ea-4041-4581-924e-0e16df653a6d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:53:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"321020ea-4041-4581-924e-0e16df653a6d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T17:53:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"321020ea-4041-4581-924e-0e16df653a6d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"866eaebd-ec24-4468-be1c-55437d4977d2","keyName":"e2e-rate-a-6ac59f","selected_subscription":"e2e-rate-iso-a-6ac59f","selected_subscription_key":"ai-tenant-e2e-shared-a-3beb3b/e2e-rate-iso-a-6ac59f@ai-tenant-e2e-shared-a-3beb3b/rate-test-model-3beb3b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3beb3b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6ac59f","namespace":"ai-tenant-e2e-shared-a-3beb3b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T17:53:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"321020ea-4041-4581-924e-0e16df653a6d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:53:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"321020ea-4041-4581-924e-0e16df653a6d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:53:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f47b95ae-89c1-45ca-a694-53fc353c751b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:53544","PortSpecifier":{"PortValue":53544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f47b95ae-89c1-45ca-a694-53fc353c751b","method":"POST","path":"/ai-tenant-e2e-shared-b-9f66f0/rate-test-model-9f66f0/v1/completions","host":"e2e-shared-b-9f66f0.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:53:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f47b95ae-89c1-45ca-a694-53fc353c751b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:53544","PortSpecifier":{"PortValue":53544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783706028,"nanos":26179811},"http":{"id":"f47b95ae-89c1-45ca-a694-53fc353c751b","method":"POST","headers":{":authority":"e2e-shared-b-9f66f0.apps.c2229a72-d6cf-469e-9ffe-bddae96f0fc5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-9f66f0/rate-test-model-9f66f0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:53:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f47b95ae-89c1-45ca-a694-53fc353c751b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6st82lzewmNZ8oR1_X1uZgCeuxEsXsHvm1dRpQ5uq2EhnwLCvJrUrqHKTN5i"}
{"level":"debug","ts":"2026-07-10T17:53:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f47b95ae-89c1-45ca-a694-53fc353c751b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-9f66f0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6st82lzewmNZ8oR1_X1uZgCeuxEsXsHvm1dRpQ5uq2EhnwLCvJrUrqHKTN5i\"}"}
{"level":"debug","ts":"2026-07-10T17:53:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f47b95ae-89c1-45ca-a694-53fc353c751b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-9f66f0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3383c349-a328-481a-aad0-06f2529a2fb8","keyName":"e2e-rate-b-6ac59f","subscription":"e2e-rate-iso-b-6ac59f","tenant":"e2e-shared-b-9f66f0","userId":"3383c349-a328-481a-aad0-06f2529a2fb8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T17:53:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f47b95ae-89c1-45ca-a694-53fc353c751b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-9f66f0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-9f66f0/rate-test-model-9f66f0\",\"requestedSubscription\":\"e2e-rate-iso-b-6ac59f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T17:53:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f47b95ae-89c1-45ca-a694-53fc353c751b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-9f66f0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9f66f0","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-6ac59f","namespace":"ai-tenant-e2e-shared-b-9f66f0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T17:53:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f47b95ae-89c1-45ca-a694-53fc353c751b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:53:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f47b95ae-89c1-45ca-a694-53fc353c751b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f47b95ae-89c1-45ca-a694-53fc353c751b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f47b95ae-89c1-45ca-a694-53fc353c751b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-9f66f0/rate-test-model-9f66f0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f47b95ae-89c1-45ca-a694-53fc353c751b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:53:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f47b95ae-89c1-45ca-a694-53fc353c751b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:53:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f47b95ae-89c1-45ca-a694-53fc353c751b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-6ac59f"}
{"level":"debug","ts":"2026-07-10T17:53:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f47b95ae-89c1-45ca-a694-53fc353c751b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T17:53:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f47b95ae-89c1-45ca-a694-53fc353c751b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3383c349-a328-481a-aad0-06f2529a2fb8","keyName":"e2e-rate-b-6ac59f","selected_subscription":"e2e-rate-iso-b-6ac59f","selected_subscription_key":"ai-tenant-e2e-shared-b-9f66f0/e2e-rate-iso-b-6ac59f@ai-tenant-e2e-shared-b-9f66f0/rate-test-model-9f66f0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9f66f0","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-6ac59f","namespace":"ai-tenant-e2e-shared-b-9f66f0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T17:53:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f47b95ae-89c1-45ca-a694-53fc353c751b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:53:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f47b95ae-89c1-45ca-a694-53fc353c751b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:53:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5edeb67e7d0909164ff56c952351e057cfdfef4b061a04ca491f655af38c6fc4"}
{"level":"info","ts":"2026-07-10T17:53:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/88d5b0f8219c3483206029353819f9a541082a6720ced97055f2fc2c8da7b251"}
{"level":"info","ts":"2026-07-10T17:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c113bb4c59a7cb1d16bedc1f3326168b08faf9592dad1f285beeb24ebd7f7521"}
{"level":"info","ts":"2026-07-10T17:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/032b5f778367eb8a741f28a4f0de918770745d9bc96ad50f03d5cdc66414d68e"}
{"level":"info","ts":"2026-07-10T17:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a72d19fb1df7be5dbd254fd3096b7419b973a8ef93faba0996992afa292a7d81"}
{"level":"info","ts":"2026-07-10T17:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d1ee3352ba8335d3da2b6a9bec659c561d4e18ce5a9de62e196fbe1d09f2ff85"}
{"level":"info","ts":"2026-07-10T17:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/22569a450059b7b16efd9e0bdfedf5edb095432e6276bcc2a73681e0c8a2c2bc"}
{"level":"info","ts":"2026-07-10T17:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a49dfabf9dd2b940273e48365e5786445f6a2ae42d60ab6b5a96f59a669d36a"}
{"level":"info","ts":"2026-07-10T17:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e3e13e8c2ce38b386a6ebd84a9b13ac6116c2efd89c4ae1d32220cb836c273b3"}
{"level":"info","ts":"2026-07-10T17:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a2cfe30bae599a13d0ad096e345c366977da54ed88fb54d09236260055fb59ab"}
{"level":"info","ts":"2026-07-10T17:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ad7bf3834477a5b4457de2c7edaf443b0d8a6295dc994df9977c29a5579ac57"}
{"level":"info","ts":"2026-07-10T17:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb71d1587e27ceb11f9102fbb315326986aa1be57c7dd3d04bc4e7f414fe907e"}
{"level":"info","ts":"2026-07-10T17:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b3740e7770f63b03b610e0dd41cbb1c50227bdc414eeb9954e03ed2c328af67b"}
{"level":"info","ts":"2026-07-10T17:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a9fe50b37dea316e9925c164c4d3e667cbe4c31fd1d4fd04eafb79c4edbfa96"}
{"level":"info","ts":"2026-07-10T17:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc86d4eb3e6c27ce523044c464a4a97dc25617003b6e6159d41c6e6fd59a376f"}
{"level":"info","ts":"2026-07-10T17:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1905c217ab456dd10b0bd365bd89ee8cab40b7a6b011c11e6f44a8bbea719840"}
{"level":"info","ts":"2026-07-10T17:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/48352ac43f93a0ef720e4dbc0544cea25c7523c3bcb5ee74ace8ad736a96a4fc"}
{"level":"info","ts":"2026-07-10T17:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5fe5cfe714cee1f160623c0fcfc7d499cb3269534ec8423d716891443ee95caa"}
{"level":"info","ts":"2026-07-10T17:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70bff0f96baae2143676d9c0fc28581532add8ec5b2d3900596699566d13afb8"}
{"level":"info","ts":"2026-07-10T17:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/666c4064c80564b3583c630ddfa3ef5454d5ff954237f54e34a346468143ba9c"}
{"level":"info","ts":"2026-07-10T17:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e5c6eb70c7280da1101ed31a75d81a4c1fd9ef8a688f373be71a4b780da1a137"}
{"level":"info","ts":"2026-07-10T17:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/44986b74e95212f14a87fab3f97ef169d106d7c35ffa23704b9149693f3efbda"}
{"level":"info","ts":"2026-07-10T17:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/32f8bb12835c4547c09efd571f14bed6f00808f58c9721b3dcb758a8fa6c6de5"}
{"level":"info","ts":"2026-07-10T17:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e49d1830106dd17774362b919fc87393cdd06130726a1a2b6b4a51ff564d4161"}