--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-02T19:36:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9ff58e286cdb2226ffa4bc47fe7865cb2fcfd7ffd4f5f70bdba3c3552a290ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:36:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3f93d81e820d363a7ff67ff1b1b72e8f79904afaa8b940faad79602ef4debee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:36:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9ff58e286cdb2226ffa4bc47fe7865cb2fcfd7ffd4f5f70bdba3c3552a290ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:36:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9ff58e286cdb2226ffa4bc47fe7865cb2fcfd7ffd4f5f70bdba3c3552a290ae"}
{"level":"debug","ts":"2026-07-02T19:36:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9ff58e286cdb2226ffa4bc47fe7865cb2fcfd7ffd4f5f70bdba3c3552a290ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:36:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:36:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9ff58e286cdb2226ffa4bc47fe7865cb2fcfd7ffd4f5f70bdba3c3552a290ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:36:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9ff58e286cdb2226ffa4bc47fe7865cb2fcfd7ffd4f5f70bdba3c3552a290ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:36:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9ff58e286cdb2226ffa4bc47fe7865cb2fcfd7ffd4f5f70bdba3c3552a290ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:36:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3f93d81e820d363a7ff67ff1b1b72e8f79904afaa8b940faad79602ef4debee"}
{"level":"info","ts":"2026-07-02T19:36:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9ff58e286cdb2226ffa4bc47fe7865cb2fcfd7ffd4f5f70bdba3c3552a290ae"}
{"level":"debug","ts":"2026-07-02T19:36:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c686a6c0fd0016c2aabaec29b8f5d45369400d412169c770a936fe57a4c7a5e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:36:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:36:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:36:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c686a6c0fd0016c2aabaec29b8f5d45369400d412169c770a936fe57a4c7a5e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:36:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c686a6c0fd0016c2aabaec29b8f5d45369400d412169c770a936fe57a4c7a5e0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:36:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c686a6c0fd0016c2aabaec29b8f5d45369400d412169c770a936fe57a4c7a5e0"}
{"level":"debug","ts":"2026-07-02T19:36:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c686a6c0fd0016c2aabaec29b8f5d45369400d412169c770a936fe57a4c7a5e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:36:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c686a6c0fd0016c2aabaec29b8f5d45369400d412169c770a936fe57a4c7a5e0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:36:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c686a6c0fd0016c2aabaec29b8f5d45369400d412169c770a936fe57a4c7a5e0"}
{"level":"debug","ts":"2026-07-02T19:36:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c686a6c0fd0016c2aabaec29b8f5d45369400d412169c770a936fe57a4c7a5e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:36:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:36:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c686a6c0fd0016c2aabaec29b8f5d45369400d412169c770a936fe57a4c7a5e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:36:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c686a6c0fd0016c2aabaec29b8f5d45369400d412169c770a936fe57a4c7a5e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:36:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cc2aa4368e58b6bd7f7c26cc597ce53420de5967446e1b32c0e286132f327ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:36:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:36:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cc2aa4368e58b6bd7f7c26cc597ce53420de5967446e1b32c0e286132f327ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c686a6c0fd0016c2aabaec29b8f5d45369400d412169c770a936fe57a4c7a5e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5924941b1aac3de8de12d0de94c1127eef0418ffa776bc3d950e521814a3ec7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:36:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:36:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cc2aa4368e58b6bd7f7c26cc597ce53420de5967446e1b32c0e286132f327ae"}
{"level":"info","ts":"2026-07-02T19:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5924941b1aac3de8de12d0de94c1127eef0418ffa776bc3d950e521814a3ec7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cc2aa4368e58b6bd7f7c26cc597ce53420de5967446e1b32c0e286132f327ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:36:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:36:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1cc2aa4368e58b6bd7f7c26cc597ce53420de5967446e1b32c0e286132f327ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c686a6c0fd0016c2aabaec29b8f5d45369400d412169c770a936fe57a4c7a5e0"}
{"level":"info","ts":"2026-07-02T19:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cc2aa4368e58b6bd7f7c26cc597ce53420de5967446e1b32c0e286132f327ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0244dee4aee06e41763801def39656641d0259302d108590b1a5ccfa8a90437f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:36:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:36:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5924941b1aac3de8de12d0de94c1127eef0418ffa776bc3d950e521814a3ec7a"}
{"level":"info","ts":"2026-07-02T19:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0244dee4aee06e41763801def39656641d0259302d108590b1a5ccfa8a90437f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5924941b1aac3de8de12d0de94c1127eef0418ffa776bc3d950e521814a3ec7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:36:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:36:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5924941b1aac3de8de12d0de94c1127eef0418ffa776bc3d950e521814a3ec7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cc2aa4368e58b6bd7f7c26cc597ce53420de5967446e1b32c0e286132f327ae"}
{"level":"info","ts":"2026-07-02T19:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5924941b1aac3de8de12d0de94c1127eef0418ffa776bc3d950e521814a3ec7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cc2aa4368e58b6bd7f7c26cc597ce53420de5967446e1b32c0e286132f327ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0244dee4aee06e41763801def39656641d0259302d108590b1a5ccfa8a90437f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:36:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:36:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0244dee4aee06e41763801def39656641d0259302d108590b1a5ccfa8a90437f"}
{"level":"info","ts":"2026-07-02T19:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0244dee4aee06e41763801def39656641d0259302d108590b1a5ccfa8a90437f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5924941b1aac3de8de12d0de94c1127eef0418ffa776bc3d950e521814a3ec7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:36:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:36:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5924941b1aac3de8de12d0de94c1127eef0418ffa776bc3d950e521814a3ec7a"}
{"level":"info","ts":"2026-07-02T19:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8220a1011002777e4b16952222126ba49e7f9370b0e506c7141808c9cf5993ed"}
{"level":"info","ts":"2026-07-02T19:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5924941b1aac3de8de12d0de94c1127eef0418ffa776bc3d950e521814a3ec7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8220a1011002777e4b16952222126ba49e7f9370b0e506c7141808c9cf5993ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:36:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:36:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8220a1011002777e4b16952222126ba49e7f9370b0e506c7141808c9cf5993ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0244dee4aee06e41763801def39656641d0259302d108590b1a5ccfa8a90437f"}
{"level":"info","ts":"2026-07-02T19:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8220a1011002777e4b16952222126ba49e7f9370b0e506c7141808c9cf5993ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0244dee4aee06e41763801def39656641d0259302d108590b1a5ccfa8a90437f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:36:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:36:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0244dee4aee06e41763801def39656641d0259302d108590b1a5ccfa8a90437f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5924941b1aac3de8de12d0de94c1127eef0418ffa776bc3d950e521814a3ec7a"}
{"level":"info","ts":"2026-07-02T19:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0244dee4aee06e41763801def39656641d0259302d108590b1a5ccfa8a90437f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5924941b1aac3de8de12d0de94c1127eef0418ffa776bc3d950e521814a3ec7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:36:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:36:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5924941b1aac3de8de12d0de94c1127eef0418ffa776bc3d950e521814a3ec7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8220a1011002777e4b16952222126ba49e7f9370b0e506c7141808c9cf5993ed"}
{"level":"info","ts":"2026-07-02T19:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5924941b1aac3de8de12d0de94c1127eef0418ffa776bc3d950e521814a3ec7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8220a1011002777e4b16952222126ba49e7f9370b0e506c7141808c9cf5993ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0244dee4aee06e41763801def39656641d0259302d108590b1a5ccfa8a90437f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:36:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:36:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0244dee4aee06e41763801def39656641d0259302d108590b1a5ccfa8a90437f"}
{"level":"info","ts":"2026-07-02T19:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0244dee4aee06e41763801def39656641d0259302d108590b1a5ccfa8a90437f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5924941b1aac3de8de12d0de94c1127eef0418ffa776bc3d950e521814a3ec7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:36:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:36:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5924941b1aac3de8de12d0de94c1127eef0418ffa776bc3d950e521814a3ec7a"}
{"level":"info","ts":"2026-07-02T19:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0244dee4aee06e41763801def39656641d0259302d108590b1a5ccfa8a90437f"}
{"level":"info","ts":"2026-07-02T19:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5924941b1aac3de8de12d0de94c1127eef0418ffa776bc3d950e521814a3ec7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0244dee4aee06e41763801def39656641d0259302d108590b1a5ccfa8a90437f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:36:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:36:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0244dee4aee06e41763801def39656641d0259302d108590b1a5ccfa8a90437f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0244dee4aee06e41763801def39656641d0259302d108590b1a5ccfa8a90437f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5924941b1aac3de8de12d0de94c1127eef0418ffa776bc3d950e521814a3ec7a"}
{"level":"debug","ts":"2026-07-02T19:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5924941b1aac3de8de12d0de94c1127eef0418ffa776bc3d950e521814a3ec7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:36:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:36:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5924941b1aac3de8de12d0de94c1127eef0418ffa776bc3d950e521814a3ec7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0244dee4aee06e41763801def39656641d0259302d108590b1a5ccfa8a90437f"}
{"level":"info","ts":"2026-07-02T19:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5924941b1aac3de8de12d0de94c1127eef0418ffa776bc3d950e521814a3ec7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0244dee4aee06e41763801def39656641d0259302d108590b1a5ccfa8a90437f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5924941b1aac3de8de12d0de94c1127eef0418ffa776bc3d950e521814a3ec7a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5924941b1aac3de8de12d0de94c1127eef0418ffa776bc3d950e521814a3ec7a"}
{"level":"info","ts":"2026-07-02T19:36:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5f7682b-d0b0-46c0-8147-9da217252b3b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:49502","PortSpecifier":{"PortValue":49502}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d5f7682b-d0b0-46c0-8147-9da217252b3b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-inf-a-fd9e49.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:36:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5f7682b-d0b0-46c0-8147-9da217252b3b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:49502","PortSpecifier":{"PortValue":49502}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783020986,"nanos":99144169},"http":{"id":"d5f7682b-d0b0-46c0-8147-9da217252b3b","method":"POST","headers":{":authority":"e2e-inf-a-fd9e49.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:36:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d5f7682b-d0b0-46c0-8147-9da217252b3b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:36:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d5f7682b-d0b0-46c0-8147-9da217252b3b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"]}}
{"level":"debug","ts":"2026-07-02T19:36:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d5f7682b-d0b0-46c0-8147-9da217252b3b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b1b8f79dd48450f81c26a5b5006561bad54fed06d915da8105984ae10fd883b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-a-fd9e49.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:36:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5f7682b-d0b0-46c0-8147-9da217252b3b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:36:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5f7682b-d0b0-46c0-8147-9da217252b3b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:36:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5f7682b-d0b0-46c0-8147-9da217252b3b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-fd9e49/test-model-fd9e49\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:36:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d5f7682b-d0b0-46c0-8147-9da217252b3b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:36:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5f7682b-d0b0-46c0-8147-9da217252b3b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T19:36:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5f7682b-d0b0-46c0-8147-9da217252b3b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T19:36:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5f7682b-d0b0-46c0-8147-9da217252b3b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:36:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5f7682b-d0b0-46c0-8147-9da217252b3b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:36:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec75f98e-e8eb-4c2f-a070-2f407faf55bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:60094","PortSpecifier":{"PortValue":60094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ec75f98e-e8eb-4c2f-a070-2f407faf55bd","method":"POST","path":"/ai-tenant-e2e-inf-a-fd9e49/test-model-fd9e49/v1/chat/completions","host":"e2e-inf-a-fd9e49.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:36:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec75f98e-e8eb-4c2f-a070-2f407faf55bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:60094","PortSpecifier":{"PortValue":60094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783020990,"nanos":166822225},"http":{"id":"ec75f98e-e8eb-4c2f-a070-2f407faf55bd","method":"POST","headers":{":authority":"e2e-inf-a-fd9e49.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-a-fd9e49/test-model-fd9e49/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:36:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ec75f98e-e8eb-4c2f-a070-2f407faf55bd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11huC897qYLXjxKVM_Sxah4BOrtBvux9daLvP27yJZX6jiB3lzvDzh8pOcNfT"}
{"level":"debug","ts":"2026-07-02T19:36:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ec75f98e-e8eb-4c2f-a070-2f407faf55bd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-a-fd9e49.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11huC897qYLXjxKVM_Sxah4BOrtBvux9daLvP27yJZX6jiB3lzvDzh8pOcNfT\"}"}
{"level":"debug","ts":"2026-07-02T19:36:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ec75f98e-e8eb-4c2f-a070-2f407faf55bd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-a-fd9e49.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"88f99b37-c5d3-4df5-9ec5-06d10ea2c701","keyName":"e2e-tenant-inference-fd9e49","subscription":"test-model-fd9e49-sub","tenant":"e2e-inf-a-fd9e49","userId":"88f99b37-c5d3-4df5-9ec5-06d10ea2c701","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T19:36:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ec75f98e-e8eb-4c2f-a070-2f407faf55bd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-inf-a-fd9e49.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-inf-a-fd9e49/test-model-fd9e49\",\"requestedSubscription\":\"test-model-fd9e49-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T19:36:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ec75f98e-e8eb-4c2f-a070-2f407faf55bd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-a-fd9e49.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"test-model-fd9e49","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"test-model-fd9e49-sub","namespace":"ai-tenant-e2e-inf-a-fd9e49","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T19:36:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ec75f98e-e8eb-4c2f-a070-2f407faf55bd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:36:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec75f98e-e8eb-4c2f-a070-2f407faf55bd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:36:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec75f98e-e8eb-4c2f-a070-2f407faf55bd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:36:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec75f98e-e8eb-4c2f-a070-2f407faf55bd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:36:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec75f98e-e8eb-4c2f-a070-2f407faf55bd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-fd9e49/test-model-fd9e49\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:36:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec75f98e-e8eb-4c2f-a070-2f407faf55bd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T19:36:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec75f98e-e8eb-4c2f-a070-2f407faf55bd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:36:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec75f98e-e8eb-4c2f-a070-2f407faf55bd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"test-model-fd9e49-sub"}
{"level":"debug","ts":"2026-07-02T19:36:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec75f98e-e8eb-4c2f-a070-2f407faf55bd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"88f99b37-c5d3-4df5-9ec5-06d10ea2c701","keyName":"e2e-tenant-inference-fd9e49","selected_subscription":"test-model-fd9e49-sub","selected_subscription_key":"ai-tenant-e2e-inf-a-fd9e49/test-model-fd9e49-sub@ai-tenant-e2e-inf-a-fd9e49/test-model-fd9e49","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"test-model-fd9e49","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"test-model-fd9e49-sub","namespace":"ai-tenant-e2e-inf-a-fd9e49","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T19:36:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec75f98e-e8eb-4c2f-a070-2f407faf55bd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:36:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec75f98e-e8eb-4c2f-a070-2f407faf55bd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:36:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d300eb1b-a3f9-44dd-a8d7-c48e71eede6a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:60102","PortSpecifier":{"PortValue":60102}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d300eb1b-a3f9-44dd-a8d7-c48e71eede6a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-inf-a-fd9e49.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:36:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d300eb1b-a3f9-44dd-a8d7-c48e71eede6a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:60102","PortSpecifier":{"PortValue":60102}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783020990,"nanos":487644509},"http":{"id":"d300eb1b-a3f9-44dd-a8d7-c48e71eede6a","method":"POST","headers":{":authority":"e2e-inf-a-fd9e49.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:36:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d300eb1b-a3f9-44dd-a8d7-c48e71eede6a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:36:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d300eb1b-a3f9-44dd-a8d7-c48e71eede6a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"]}}
{"level":"debug","ts":"2026-07-02T19:36:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d300eb1b-a3f9-44dd-a8d7-c48e71eede6a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b1b8f79dd48450f81c26a5b5006561bad54fed06d915da8105984ae10fd883b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-a-fd9e49.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:36:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d300eb1b-a3f9-44dd-a8d7-c48e71eede6a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:36:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d300eb1b-a3f9-44dd-a8d7-c48e71eede6a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:36:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d300eb1b-a3f9-44dd-a8d7-c48e71eede6a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-fd9e49/test-model-fd9e49\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:36:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d300eb1b-a3f9-44dd-a8d7-c48e71eede6a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:36:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d300eb1b-a3f9-44dd-a8d7-c48e71eede6a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T19:36:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d300eb1b-a3f9-44dd-a8d7-c48e71eede6a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T19:36:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d300eb1b-a3f9-44dd-a8d7-c48e71eede6a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:36:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d300eb1b-a3f9-44dd-a8d7-c48e71eede6a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:36:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bce2d0b7-f9fd-4cf1-a065-a1c92595e584","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:48750","PortSpecifier":{"PortValue":48750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bce2d0b7-f9fd-4cf1-a065-a1c92595e584","method":"POST","path":"/ai-tenant-e2e-inf-b-78744c/test-model-78744c/v1/chat/completions","host":"e2e-inf-b-78744c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:36:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bce2d0b7-f9fd-4cf1-a065-a1c92595e584","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:48750","PortSpecifier":{"PortValue":48750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783020990,"nanos":527249293},"http":{"id":"bce2d0b7-f9fd-4cf1-a065-a1c92595e584","method":"POST","headers":{":authority":"e2e-inf-b-78744c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-78744c/test-model-78744c/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:36:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bce2d0b7-f9fd-4cf1-a065-a1c92595e584","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dPn2zZdg5pJjpoAp_1z9mQ2Lx3wMsuelXewzkOB8RFztVj8TBXrRSgzQrBhs"}
{"level":"debug","ts":"2026-07-02T19:36:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bce2d0b7-f9fd-4cf1-a065-a1c92595e584","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-b-78744c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dPn2zZdg5pJjpoAp_1z9mQ2Lx3wMsuelXewzkOB8RFztVj8TBXrRSgzQrBhs\"}"}
{"level":"debug","ts":"2026-07-02T19:36:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bce2d0b7-f9fd-4cf1-a065-a1c92595e584","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-78744c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-02T19:36:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"bce2d0b7-f9fd-4cf1-a065-a1c92595e584","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-78744c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"}
{"level":"debug","ts":"2026-07-02T19:36:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bce2d0b7-f9fd-4cf1-a065-a1c92595e584","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"8220a1011002777e4b16952222126ba49e7f9370b0e506c7141808c9cf5993ed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-b-78744c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-78744c/test-model-78744c/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:36:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bce2d0b7-f9fd-4cf1-a065-a1c92595e584","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:36:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"bce2d0b7-f9fd-4cf1-a065-a1c92595e584","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-02T19:36:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bce2d0b7-f9fd-4cf1-a065-a1c92595e584","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-02T19:36:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bce2d0b7-f9fd-4cf1-a065-a1c92595e584","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-02T19:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/467b409fffe779542f781d0bae626348f1ec77ceacc3547a96f37e464c6ab6d2"}
{"level":"info","ts":"2026-07-02T19:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20e589b5735ae04ed95ea624fdf7bb15a87d552aa5950ca64adc9b952d0d5f85"}
{"level":"info","ts":"2026-07-02T19:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6671fa64b36468500bd48f6bfb917843ff6ed9ece5aeda490f7a1068d8f59e7b"}
{"level":"info","ts":"2026-07-02T19:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c686a6c0fd0016c2aabaec29b8f5d45369400d412169c770a936fe57a4c7a5e0"}
{"level":"info","ts":"2026-07-02T19:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6831a1d6f28abdffc8c77dc1afccf1d0efd5b1d251eac215d81c6231d60a1ce7"}
{"level":"info","ts":"2026-07-02T19:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7a4ba65e841d0719db79f612e534a1a8844774ac4054f6d6b60d0236515d9512"}
{"level":"info","ts":"2026-07-02T19:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b1b8f79dd48450f81c26a5b5006561bad54fed06d915da8105984ae10fd883b"}
{"level":"info","ts":"2026-07-02T19:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0acb575e483a87f54177ad361d3ef0c953681a84f9bf7686013c9ceb942099d0"}
{"level":"info","ts":"2026-07-02T19:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1cc2aa4368e58b6bd7f7c26cc597ce53420de5967446e1b32c0e286132f327ae"}
{"level":"info","ts":"2026-07-02T19:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8220a1011002777e4b16952222126ba49e7f9370b0e506c7141808c9cf5993ed"}
{"level":"info","ts":"2026-07-02T19:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb9588c21209f49376a2e000247c79f22eb3fdcc29b11ddfc51e41d9c5ace78a"}
{"level":"info","ts":"2026-07-02T19:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/90f8f3e2d04fcfc9215e27160a05684c6ef9094fc0f575d6df0a2bbc0318111a"}
{"level":"info","ts":"2026-07-02T19:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5924941b1aac3de8de12d0de94c1127eef0418ffa776bc3d950e521814a3ec7a"}
{"level":"info","ts":"2026-07-02T19:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b3f93d81e820d363a7ff67ff1b1b72e8f79904afaa8b940faad79602ef4debee"}
{"level":"info","ts":"2026-07-02T19:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/61335dac246d81053a623015c6a869e55348e190dc4930f68aa17bbad21f91ad"}
{"level":"info","ts":"2026-07-02T19:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b9ff58e286cdb2226ffa4bc47fe7865cb2fcfd7ffd4f5f70bdba3c3552a290ae"}
{"level":"info","ts":"2026-07-02T19:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/de7332b4ab8bdf7a39a6c343bfcd16847e818dd872e503bcc52e104f7b1c0e70"}
{"level":"info","ts":"2026-07-02T19:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/73106420bdff194ab5f35e8247051a9083881cc9059a5e68bf70cd1067121ee7"}
{"level":"info","ts":"2026-07-02T19:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0244dee4aee06e41763801def39656641d0259302d108590b1a5ccfa8a90437f"}
{"level":"info","ts":"2026-07-02T19:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b98518b9c9cbe99a3e96fdd86c83474746353528efae4ef44aa129dc131cbd02"}
{"level":"debug","ts":"2026-07-02T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db74ab211942dfe2a3358ecf585d271cc72da10a57a9b986bf807fee63b329da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:37:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:37:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db74ab211942dfe2a3358ecf585d271cc72da10a57a9b986bf807fee63b329da","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db74ab211942dfe2a3358ecf585d271cc72da10a57a9b986bf807fee63b329da"}
{"level":"debug","ts":"2026-07-02T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db74ab211942dfe2a3358ecf585d271cc72da10a57a9b986bf807fee63b329da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:37:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:37:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db74ab211942dfe2a3358ecf585d271cc72da10a57a9b986bf807fee63b329da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db74ab211942dfe2a3358ecf585d271cc72da10a57a9b986bf807fee63b329da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db74ab211942dfe2a3358ecf585d271cc72da10a57a9b986bf807fee63b329da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db74ab211942dfe2a3358ecf585d271cc72da10a57a9b986bf807fee63b329da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:37:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:37:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db74ab211942dfe2a3358ecf585d271cc72da10a57a9b986bf807fee63b329da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db74ab211942dfe2a3358ecf585d271cc72da10a57a9b986bf807fee63b329da","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db74ab211942dfe2a3358ecf585d271cc72da10a57a9b986bf807fee63b329da"}
{"level":"debug","ts":"2026-07-02T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db74ab211942dfe2a3358ecf585d271cc72da10a57a9b986bf807fee63b329da","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db74ab211942dfe2a3358ecf585d271cc72da10a57a9b986bf807fee63b329da"}
{"level":"debug","ts":"2026-07-02T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db74ab211942dfe2a3358ecf585d271cc72da10a57a9b986bf807fee63b329da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:37:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:37:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db74ab211942dfe2a3358ecf585d271cc72da10a57a9b986bf807fee63b329da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db74ab211942dfe2a3358ecf585d271cc72da10a57a9b986bf807fee63b329da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db74ab211942dfe2a3358ecf585d271cc72da10a57a9b986bf807fee63b329da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:37:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:37:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db74ab211942dfe2a3358ecf585d271cc72da10a57a9b986bf807fee63b329da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db74ab211942dfe2a3358ecf585d271cc72da10a57a9b986bf807fee63b329da","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db74ab211942dfe2a3358ecf585d271cc72da10a57a9b986bf807fee63b329da"}
{"level":"debug","ts":"2026-07-02T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db74ab211942dfe2a3358ecf585d271cc72da10a57a9b986bf807fee63b329da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db74ab211942dfe2a3358ecf585d271cc72da10a57a9b986bf807fee63b329da","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db74ab211942dfe2a3358ecf585d271cc72da10a57a9b986bf807fee63b329da"}
{"level":"debug","ts":"2026-07-02T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db74ab211942dfe2a3358ecf585d271cc72da10a57a9b986bf807fee63b329da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:37:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:37:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db74ab211942dfe2a3358ecf585d271cc72da10a57a9b986bf807fee63b329da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db74ab211942dfe2a3358ecf585d271cc72da10a57a9b986bf807fee63b329da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db74ab211942dfe2a3358ecf585d271cc72da10a57a9b986bf807fee63b329da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:37:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:37:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db74ab211942dfe2a3358ecf585d271cc72da10a57a9b986bf807fee63b329da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db74ab211942dfe2a3358ecf585d271cc72da10a57a9b986bf807fee63b329da","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db74ab211942dfe2a3358ecf585d271cc72da10a57a9b986bf807fee63b329da"}
{"level":"debug","ts":"2026-07-02T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db74ab211942dfe2a3358ecf585d271cc72da10a57a9b986bf807fee63b329da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db74ab211942dfe2a3358ecf585d271cc72da10a57a9b986bf807fee63b329da","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db74ab211942dfe2a3358ecf585d271cc72da10a57a9b986bf807fee63b329da"}
{"level":"debug","ts":"2026-07-02T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db74ab211942dfe2a3358ecf585d271cc72da10a57a9b986bf807fee63b329da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:37:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:37:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db74ab211942dfe2a3358ecf585d271cc72da10a57a9b986bf807fee63b329da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db74ab211942dfe2a3358ecf585d271cc72da10a57a9b986bf807fee63b329da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db74ab211942dfe2a3358ecf585d271cc72da10a57a9b986bf807fee63b329da","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db74ab211942dfe2a3358ecf585d271cc72da10a57a9b986bf807fee63b329da"}
{"level":"debug","ts":"2026-07-02T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1fc39a3ac67ccde2028f19716a7acd82d1e727420e82435849ffd17ab40ffec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:37:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:37:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1fc39a3ac67ccde2028f19716a7acd82d1e727420e82435849ffd17ab40ffec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1fc39a3ac67ccde2028f19716a7acd82d1e727420e82435849ffd17ab40ffec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1fc39a3ac67ccde2028f19716a7acd82d1e727420e82435849ffd17ab40ffec"}
{"level":"debug","ts":"2026-07-02T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1fc39a3ac67ccde2028f19716a7acd82d1e727420e82435849ffd17ab40ffec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1fc39a3ac67ccde2028f19716a7acd82d1e727420e82435849ffd17ab40ffec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1fc39a3ac67ccde2028f19716a7acd82d1e727420e82435849ffd17ab40ffec"}
{"level":"debug","ts":"2026-07-02T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1fc39a3ac67ccde2028f19716a7acd82d1e727420e82435849ffd17ab40ffec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:37:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:37:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1fc39a3ac67ccde2028f19716a7acd82d1e727420e82435849ffd17ab40ffec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1fc39a3ac67ccde2028f19716a7acd82d1e727420e82435849ffd17ab40ffec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1fc39a3ac67ccde2028f19716a7acd82d1e727420e82435849ffd17ab40ffec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1fc39a3ac67ccde2028f19716a7acd82d1e727420e82435849ffd17ab40ffec"}
{"level":"debug","ts":"2026-07-02T19:37:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27d220fdf01cfbd9644d6b3270de549ff40d743372ddddc552b59f2277506c0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:37:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:37:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:37:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27d220fdf01cfbd9644d6b3270de549ff40d743372ddddc552b59f2277506c0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:37:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27d220fdf01cfbd9644d6b3270de549ff40d743372ddddc552b59f2277506c0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:37:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:37:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:37:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27d220fdf01cfbd9644d6b3270de549ff40d743372ddddc552b59f2277506c0b"}
{"level":"info","ts":"2026-07-02T19:37:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27d220fdf01cfbd9644d6b3270de549ff40d743372ddddc552b59f2277506c0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:37:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27d220fdf01cfbd9644d6b3270de549ff40d743372ddddc552b59f2277506c0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:37:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:37:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-02T19:37:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"27d220fdf01cfbd9644d6b3270de549ff40d743372ddddc552b59f2277506c0b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"27d220fdf01cfbd9644d6b3270de549ff40d743372ddddc552b59f2277506c0b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T19:37:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27d220fdf01cfbd9644d6b3270de549ff40d743372ddddc552b59f2277506c0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:37:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27d220fdf01cfbd9644d6b3270de549ff40d743372ddddc552b59f2277506c0b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:37:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27d220fdf01cfbd9644d6b3270de549ff40d743372ddddc552b59f2277506c0b"}
{"level":"info","ts":"2026-07-02T19:37:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27d220fdf01cfbd9644d6b3270de549ff40d743372ddddc552b59f2277506c0b"}
{"level":"debug","ts":"2026-07-02T19:37:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27d220fdf01cfbd9644d6b3270de549ff40d743372ddddc552b59f2277506c0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:37:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:37:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27d220fdf01cfbd9644d6b3270de549ff40d743372ddddc552b59f2277506c0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:37:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27d220fdf01cfbd9644d6b3270de549ff40d743372ddddc552b59f2277506c0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:37:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27d220fdf01cfbd9644d6b3270de549ff40d743372ddddc552b59f2277506c0b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:37:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27d220fdf01cfbd9644d6b3270de549ff40d743372ddddc552b59f2277506c0b"}
{"level":"debug","ts":"2026-07-02T19:37:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da0f9a6e7a689e16d8773adbc67bbf8f678ecff291479d9be6708335a83a308e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:37:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:37:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:37:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da0f9a6e7a689e16d8773adbc67bbf8f678ecff291479d9be6708335a83a308e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:37:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da0f9a6e7a689e16d8773adbc67bbf8f678ecff291479d9be6708335a83a308e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:37:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da0f9a6e7a689e16d8773adbc67bbf8f678ecff291479d9be6708335a83a308e"}
{"level":"debug","ts":"2026-07-02T19:37:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da0f9a6e7a689e16d8773adbc67bbf8f678ecff291479d9be6708335a83a308e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:37:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da0f9a6e7a689e16d8773adbc67bbf8f678ecff291479d9be6708335a83a308e"}
{"level":"debug","ts":"2026-07-02T19:37:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da0f9a6e7a689e16d8773adbc67bbf8f678ecff291479d9be6708335a83a308e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:37:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:37:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da0f9a6e7a689e16d8773adbc67bbf8f678ecff291479d9be6708335a83a308e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:37:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da0f9a6e7a689e16d8773adbc67bbf8f678ecff291479d9be6708335a83a308e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:37:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da0f9a6e7a689e16d8773adbc67bbf8f678ecff291479d9be6708335a83a308e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:37:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da0f9a6e7a689e16d8773adbc67bbf8f678ecff291479d9be6708335a83a308e"}
{"level":"info","ts":"2026-07-02T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db74ab211942dfe2a3358ecf585d271cc72da10a57a9b986bf807fee63b329da"}
{"level":"info","ts":"2026-07-02T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1fc39a3ac67ccde2028f19716a7acd82d1e727420e82435849ffd17ab40ffec"}
{"level":"info","ts":"2026-07-02T19:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da0f9a6e7a689e16d8773adbc67bbf8f678ecff291479d9be6708335a83a308e"}
{"level":"info","ts":"2026-07-02T19:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/27d220fdf01cfbd9644d6b3270de549ff40d743372ddddc552b59f2277506c0b"}
{"level":"debug","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5686dae325210ea4f17af6afa6b10268b2332899fde83dff2de58dcbede96906","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5686dae325210ea4f17af6afa6b10268b2332899fde83dff2de58dcbede96906","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5686dae325210ea4f17af6afa6b10268b2332899fde83dff2de58dcbede96906","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5686dae325210ea4f17af6afa6b10268b2332899fde83dff2de58dcbede96906"}
{"level":"debug","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5686dae325210ea4f17af6afa6b10268b2332899fde83dff2de58dcbede96906","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5686dae325210ea4f17af6afa6b10268b2332899fde83dff2de58dcbede96906"}
{"level":"debug","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5686dae325210ea4f17af6afa6b10268b2332899fde83dff2de58dcbede96906","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:39:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:39:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5686dae325210ea4f17af6afa6b10268b2332899fde83dff2de58dcbede96906"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5686dae325210ea4f17af6afa6b10268b2332899fde83dff2de58dcbede96906","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5686dae325210ea4f17af6afa6b10268b2332899fde83dff2de58dcbede96906","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5686dae325210ea4f17af6afa6b10268b2332899fde83dff2de58dcbede96906","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5686dae325210ea4f17af6afa6b10268b2332899fde83dff2de58dcbede96906","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5686dae325210ea4f17af6afa6b10268b2332899fde83dff2de58dcbede96906","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5686dae325210ea4f17af6afa6b10268b2332899fde83dff2de58dcbede96906"}
{"level":"debug","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5686dae325210ea4f17af6afa6b10268b2332899fde83dff2de58dcbede96906","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5686dae325210ea4f17af6afa6b10268b2332899fde83dff2de58dcbede96906"}
{"level":"debug","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5686dae325210ea4f17af6afa6b10268b2332899fde83dff2de58dcbede96906","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:39:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:39:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5686dae325210ea4f17af6afa6b10268b2332899fde83dff2de58dcbede96906"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5686dae325210ea4f17af6afa6b10268b2332899fde83dff2de58dcbede96906","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5686dae325210ea4f17af6afa6b10268b2332899fde83dff2de58dcbede96906","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5686dae325210ea4f17af6afa6b10268b2332899fde83dff2de58dcbede96906"}
{"level":"debug","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d44061d488af72227f3eab0ea2e7df61ea828446794c90ad0f008dc06686ffa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d44061d488af72227f3eab0ea2e7df61ea828446794c90ad0f008dc06686ffa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d44061d488af72227f3eab0ea2e7df61ea828446794c90ad0f008dc06686ffa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d44061d488af72227f3eab0ea2e7df61ea828446794c90ad0f008dc06686ffa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d44061d488af72227f3eab0ea2e7df61ea828446794c90ad0f008dc06686ffa"}
{"level":"debug","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d44061d488af72227f3eab0ea2e7df61ea828446794c90ad0f008dc06686ffa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d44061d488af72227f3eab0ea2e7df61ea828446794c90ad0f008dc06686ffa"}
{"level":"debug","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d44061d488af72227f3eab0ea2e7df61ea828446794c90ad0f008dc06686ffa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:39:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:39:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d44061d488af72227f3eab0ea2e7df61ea828446794c90ad0f008dc06686ffa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d44061d488af72227f3eab0ea2e7df61ea828446794c90ad0f008dc06686ffa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d44061d488af72227f3eab0ea2e7df61ea828446794c90ad0f008dc06686ffa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d44061d488af72227f3eab0ea2e7df61ea828446794c90ad0f008dc06686ffa"}
{"level":"debug","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32"}
{"level":"info","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32"}
{"level":"debug","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:39:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:39:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32"}
{"level":"debug","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32"}
{"level":"debug","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:39:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:39:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d03a739385b508448a980c6f029841e3238b5ba64938e6c8e7fe520b7ce68ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d03a739385b508448a980c6f029841e3238b5ba64938e6c8e7fe520b7ce68ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d03a739385b508448a980c6f029841e3238b5ba64938e6c8e7fe520b7ce68ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d03a739385b508448a980c6f029841e3238b5ba64938e6c8e7fe520b7ce68ef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d03a739385b508448a980c6f029841e3238b5ba64938e6c8e7fe520b7ce68ef"}
{"level":"debug","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d03a739385b508448a980c6f029841e3238b5ba64938e6c8e7fe520b7ce68ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:39:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:39:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d03a739385b508448a980c6f029841e3238b5ba64938e6c8e7fe520b7ce68ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d03a739385b508448a980c6f029841e3238b5ba64938e6c8e7fe520b7ce68ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d03a739385b508448a980c6f029841e3238b5ba64938e6c8e7fe520b7ce68ef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32"}
{"level":"debug","ts":"2026-07-02T19:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"822dcd7b5c838d08b0adab814721ef9589431e2a3c6ebd2669fece01c1d9c880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d03a739385b508448a980c6f029841e3238b5ba64938e6c8e7fe520b7ce68ef"}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"822dcd7b5c838d08b0adab814721ef9589431e2a3c6ebd2669fece01c1d9c880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"822dcd7b5c838d08b0adab814721ef9589431e2a3c6ebd2669fece01c1d9c880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"822dcd7b5c838d08b0adab814721ef9589431e2a3c6ebd2669fece01c1d9c880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"822dcd7b5c838d08b0adab814721ef9589431e2a3c6ebd2669fece01c1d9c880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/822dcd7b5c838d08b0adab814721ef9589431e2a3c6ebd2669fece01c1d9c880"}
{"level":"error","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"822dcd7b5c838d08b0adab814721ef9589431e2a3c6ebd2669fece01c1d9c880","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"822dcd7b5c838d08b0adab814721ef9589431e2a3c6ebd2669fece01c1d9c880\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"822dcd7b5c838d08b0adab814721ef9589431e2a3c6ebd2669fece01c1d9c880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"822dcd7b5c838d08b0adab814721ef9589431e2a3c6ebd2669fece01c1d9c880","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/822dcd7b5c838d08b0adab814721ef9589431e2a3c6ebd2669fece01c1d9c880"}
{"level":"debug","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d07741af706c0487a2c0da30992dde42499941a401459bf315cee6ff29fc6e3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d07741af706c0487a2c0da30992dde42499941a401459bf315cee6ff29fc6e3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"085f05b6f7a7b53117c0c3d8bfa3599d01e33582bb4cae6e9fcf49971ce3f444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d07741af706c0487a2c0da30992dde42499941a401459bf315cee6ff29fc6e3c"}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"085f05b6f7a7b53117c0c3d8bfa3599d01e33582bb4cae6e9fcf49971ce3f444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d07741af706c0487a2c0da30992dde42499941a401459bf315cee6ff29fc6e3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d07741af706c0487a2c0da30992dde42499941a401459bf315cee6ff29fc6e3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d07741af706c0487a2c0da30992dde42499941a401459bf315cee6ff29fc6e3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"822dcd7b5c838d08b0adab814721ef9589431e2a3c6ebd2669fece01c1d9c880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["822dcd7b5c838d08b0adab814721ef9589431e2a3c6ebd2669fece01c1d9c880"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/085f05b6f7a7b53117c0c3d8bfa3599d01e33582bb4cae6e9fcf49971ce3f444"}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"822dcd7b5c838d08b0adab814721ef9589431e2a3c6ebd2669fece01c1d9c880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"085f05b6f7a7b53117c0c3d8bfa3599d01e33582bb4cae6e9fcf49971ce3f444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["085f05b6f7a7b53117c0c3d8bfa3599d01e33582bb4cae6e9fcf49971ce3f444"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d07741af706c0487a2c0da30992dde42499941a401459bf315cee6ff29fc6e3c"}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"085f05b6f7a7b53117c0c3d8bfa3599d01e33582bb4cae6e9fcf49971ce3f444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d07741af706c0487a2c0da30992dde42499941a401459bf315cee6ff29fc6e3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"822dcd7b5c838d08b0adab814721ef9589431e2a3c6ebd2669fece01c1d9c880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"085f05b6f7a7b53117c0c3d8bfa3599d01e33582bb4cae6e9fcf49971ce3f444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"085f05b6f7a7b53117c0c3d8bfa3599d01e33582bb4cae6e9fcf49971ce3f444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"085f05b6f7a7b53117c0c3d8bfa3599d01e33582bb4cae6e9fcf49971ce3f444","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/085f05b6f7a7b53117c0c3d8bfa3599d01e33582bb4cae6e9fcf49971ce3f444"}
{"level":"debug","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"085f05b6f7a7b53117c0c3d8bfa3599d01e33582bb4cae6e9fcf49971ce3f444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["085f05b6f7a7b53117c0c3d8bfa3599d01e33582bb4cae6e9fcf49971ce3f444"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"085f05b6f7a7b53117c0c3d8bfa3599d01e33582bb4cae6e9fcf49971ce3f444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c022103f0ceab179e08f8068b0abcf2290b9406e2e77928b2c531aeb1f8c9dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/822dcd7b5c838d08b0adab814721ef9589431e2a3c6ebd2669fece01c1d9c880"}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c022103f0ceab179e08f8068b0abcf2290b9406e2e77928b2c531aeb1f8c9dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"085f05b6f7a7b53117c0c3d8bfa3599d01e33582bb4cae6e9fcf49971ce3f444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"085f05b6f7a7b53117c0c3d8bfa3599d01e33582bb4cae6e9fcf49971ce3f444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c022103f0ceab179e08f8068b0abcf2290b9406e2e77928b2c531aeb1f8c9dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"085f05b6f7a7b53117c0c3d8bfa3599d01e33582bb4cae6e9fcf49971ce3f444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"085f05b6f7a7b53117c0c3d8bfa3599d01e33582bb4cae6e9fcf49971ce3f444","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/085f05b6f7a7b53117c0c3d8bfa3599d01e33582bb4cae6e9fcf49971ce3f444"}
{"level":"debug","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c022103f0ceab179e08f8068b0abcf2290b9406e2e77928b2c531aeb1f8c9dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c022103f0ceab179e08f8068b0abcf2290b9406e2e77928b2c531aeb1f8c9dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c022103f0ceab179e08f8068b0abcf2290b9406e2e77928b2c531aeb1f8c9dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"085f05b6f7a7b53117c0c3d8bfa3599d01e33582bb4cae6e9fcf49971ce3f444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["085f05b6f7a7b53117c0c3d8bfa3599d01e33582bb4cae6e9fcf49971ce3f444"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c022103f0ceab179e08f8068b0abcf2290b9406e2e77928b2c531aeb1f8c9dd"}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"085f05b6f7a7b53117c0c3d8bfa3599d01e33582bb4cae6e9fcf49971ce3f444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"085f05b6f7a7b53117c0c3d8bfa3599d01e33582bb4cae6e9fcf49971ce3f444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"085f05b6f7a7b53117c0c3d8bfa3599d01e33582bb4cae6e9fcf49971ce3f444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c022103f0ceab179e08f8068b0abcf2290b9406e2e77928b2c531aeb1f8c9dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c022103f0ceab179e08f8068b0abcf2290b9406e2e77928b2c531aeb1f8c9dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/085f05b6f7a7b53117c0c3d8bfa3599d01e33582bb4cae6e9fcf49971ce3f444"}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c022103f0ceab179e08f8068b0abcf2290b9406e2e77928b2c531aeb1f8c9dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"085f05b6f7a7b53117c0c3d8bfa3599d01e33582bb4cae6e9fcf49971ce3f444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["085f05b6f7a7b53117c0c3d8bfa3599d01e33582bb4cae6e9fcf49971ce3f444"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c022103f0ceab179e08f8068b0abcf2290b9406e2e77928b2c531aeb1f8c9dd"}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"085f05b6f7a7b53117c0c3d8bfa3599d01e33582bb4cae6e9fcf49971ce3f444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c022103f0ceab179e08f8068b0abcf2290b9406e2e77928b2c531aeb1f8c9dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"700e5a1a495f21d19d2382b551df80f528a77448d0a93799856a78ba8b0ebcbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"700e5a1a495f21d19d2382b551df80f528a77448d0a93799856a78ba8b0ebcbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"085f05b6f7a7b53117c0c3d8bfa3599d01e33582bb4cae6e9fcf49971ce3f444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/085f05b6f7a7b53117c0c3d8bfa3599d01e33582bb4cae6e9fcf49971ce3f444"}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"085f05b6f7a7b53117c0c3d8bfa3599d01e33582bb4cae6e9fcf49971ce3f444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"304a51d110363910cfe0a800658dca10a29ff3c66b38ce9ad986a6176feec0d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"304a51d110363910cfe0a800658dca10a29ff3c66b38ce9ad986a6176feec0d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"700e5a1a495f21d19d2382b551df80f528a77448d0a93799856a78ba8b0ebcbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/700e5a1a495f21d19d2382b551df80f528a77448d0a93799856a78ba8b0ebcbb"}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"700e5a1a495f21d19d2382b551df80f528a77448d0a93799856a78ba8b0ebcbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"085f05b6f7a7b53117c0c3d8bfa3599d01e33582bb4cae6e9fcf49971ce3f444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["085f05b6f7a7b53117c0c3d8bfa3599d01e33582bb4cae6e9fcf49971ce3f444"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c022103f0ceab179e08f8068b0abcf2290b9406e2e77928b2c531aeb1f8c9dd"}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"085f05b6f7a7b53117c0c3d8bfa3599d01e33582bb4cae6e9fcf49971ce3f444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"304a51d110363910cfe0a800658dca10a29ff3c66b38ce9ad986a6176feec0d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"304a51d110363910cfe0a800658dca10a29ff3c66b38ce9ad986a6176feec0d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"700e5a1a495f21d19d2382b551df80f528a77448d0a93799856a78ba8b0ebcbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["700e5a1a495f21d19d2382b551df80f528a77448d0a93799856a78ba8b0ebcbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/304a51d110363910cfe0a800658dca10a29ff3c66b38ce9ad986a6176feec0d3"}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"700e5a1a495f21d19d2382b551df80f528a77448d0a93799856a78ba8b0ebcbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"085f05b6f7a7b53117c0c3d8bfa3599d01e33582bb4cae6e9fcf49971ce3f444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"085f05b6f7a7b53117c0c3d8bfa3599d01e33582bb4cae6e9fcf49971ce3f444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"304a51d110363910cfe0a800658dca10a29ff3c66b38ce9ad986a6176feec0d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["304a51d110363910cfe0a800658dca10a29ff3c66b38ce9ad986a6176feec0d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/085f05b6f7a7b53117c0c3d8bfa3599d01e33582bb4cae6e9fcf49971ce3f444"}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"304a51d110363910cfe0a800658dca10a29ff3c66b38ce9ad986a6176feec0d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"700e5a1a495f21d19d2382b551df80f528a77448d0a93799856a78ba8b0ebcbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"700e5a1a495f21d19d2382b551df80f528a77448d0a93799856a78ba8b0ebcbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"085f05b6f7a7b53117c0c3d8bfa3599d01e33582bb4cae6e9fcf49971ce3f444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["085f05b6f7a7b53117c0c3d8bfa3599d01e33582bb4cae6e9fcf49971ce3f444"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/700e5a1a495f21d19d2382b551df80f528a77448d0a93799856a78ba8b0ebcbb"}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"085f05b6f7a7b53117c0c3d8bfa3599d01e33582bb4cae6e9fcf49971ce3f444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"304a51d110363910cfe0a800658dca10a29ff3c66b38ce9ad986a6176feec0d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/304a51d110363910cfe0a800658dca10a29ff3c66b38ce9ad986a6176feec0d3"}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"304a51d110363910cfe0a800658dca10a29ff3c66b38ce9ad986a6176feec0d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"700e5a1a495f21d19d2382b551df80f528a77448d0a93799856a78ba8b0ebcbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["700e5a1a495f21d19d2382b551df80f528a77448d0a93799856a78ba8b0ebcbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"700e5a1a495f21d19d2382b551df80f528a77448d0a93799856a78ba8b0ebcbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"085f05b6f7a7b53117c0c3d8bfa3599d01e33582bb4cae6e9fcf49971ce3f444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/085f05b6f7a7b53117c0c3d8bfa3599d01e33582bb4cae6e9fcf49971ce3f444"}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"085f05b6f7a7b53117c0c3d8bfa3599d01e33582bb4cae6e9fcf49971ce3f444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"304a51d110363910cfe0a800658dca10a29ff3c66b38ce9ad986a6176feec0d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["304a51d110363910cfe0a800658dca10a29ff3c66b38ce9ad986a6176feec0d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/700e5a1a495f21d19d2382b551df80f528a77448d0a93799856a78ba8b0ebcbb"}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"304a51d110363910cfe0a800658dca10a29ff3c66b38ce9ad986a6176feec0d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"700e5a1a495f21d19d2382b551df80f528a77448d0a93799856a78ba8b0ebcbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"085f05b6f7a7b53117c0c3d8bfa3599d01e33582bb4cae6e9fcf49971ce3f444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["085f05b6f7a7b53117c0c3d8bfa3599d01e33582bb4cae6e9fcf49971ce3f444"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"085f05b6f7a7b53117c0c3d8bfa3599d01e33582bb4cae6e9fcf49971ce3f444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"304a51d110363910cfe0a800658dca10a29ff3c66b38ce9ad986a6176feec0d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/304a51d110363910cfe0a800658dca10a29ff3c66b38ce9ad986a6176feec0d3"}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"304a51d110363910cfe0a800658dca10a29ff3c66b38ce9ad986a6176feec0d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"085f05b6f7a7b53117c0c3d8bfa3599d01e33582bb4cae6e9fcf49971ce3f444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/085f05b6f7a7b53117c0c3d8bfa3599d01e33582bb4cae6e9fcf49971ce3f444"}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"085f05b6f7a7b53117c0c3d8bfa3599d01e33582bb4cae6e9fcf49971ce3f444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"304a51d110363910cfe0a800658dca10a29ff3c66b38ce9ad986a6176feec0d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["304a51d110363910cfe0a800658dca10a29ff3c66b38ce9ad986a6176feec0d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"304a51d110363910cfe0a800658dca10a29ff3c66b38ce9ad986a6176feec0d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"085f05b6f7a7b53117c0c3d8bfa3599d01e33582bb4cae6e9fcf49971ce3f444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["085f05b6f7a7b53117c0c3d8bfa3599d01e33582bb4cae6e9fcf49971ce3f444"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/700e5a1a495f21d19d2382b551df80f528a77448d0a93799856a78ba8b0ebcbb"}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"085f05b6f7a7b53117c0c3d8bfa3599d01e33582bb4cae6e9fcf49971ce3f444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"304a51d110363910cfe0a800658dca10a29ff3c66b38ce9ad986a6176feec0d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"304a51d110363910cfe0a800658dca10a29ff3c66b38ce9ad986a6176feec0d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"085f05b6f7a7b53117c0c3d8bfa3599d01e33582bb4cae6e9fcf49971ce3f444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"304a51d110363910cfe0a800658dca10a29ff3c66b38ce9ad986a6176feec0d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/304a51d110363910cfe0a800658dca10a29ff3c66b38ce9ad986a6176feec0d3"}
{"level":"debug","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"304a51d110363910cfe0a800658dca10a29ff3c66b38ce9ad986a6176feec0d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:39:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["304a51d110363910cfe0a800658dca10a29ff3c66b38ce9ad986a6176feec0d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"304a51d110363910cfe0a800658dca10a29ff3c66b38ce9ad986a6176feec0d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"304a51d110363910cfe0a800658dca10a29ff3c66b38ce9ad986a6176feec0d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/085f05b6f7a7b53117c0c3d8bfa3599d01e33582bb4cae6e9fcf49971ce3f444"}
{"level":"info","ts":"2026-07-02T19:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/304a51d110363910cfe0a800658dca10a29ff3c66b38ce9ad986a6176feec0d3"}
{"level":"debug","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c557622291a6f60d739df5301771e2f4b41fdd188c8312c81c6476a9c4ef1d09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c557622291a6f60d739df5301771e2f4b41fdd188c8312c81c6476a9c4ef1d09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c557622291a6f60d739df5301771e2f4b41fdd188c8312c81c6476a9c4ef1d09","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c557622291a6f60d739df5301771e2f4b41fdd188c8312c81c6476a9c4ef1d09"}
{"level":"debug","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c557622291a6f60d739df5301771e2f4b41fdd188c8312c81c6476a9c4ef1d09","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c557622291a6f60d739df5301771e2f4b41fdd188c8312c81c6476a9c4ef1d09"}
{"level":"debug","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c557622291a6f60d739df5301771e2f4b41fdd188c8312c81c6476a9c4ef1d09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:39:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:39:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c557622291a6f60d739df5301771e2f4b41fdd188c8312c81c6476a9c4ef1d09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c557622291a6f60d739df5301771e2f4b41fdd188c8312c81c6476a9c4ef1d09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c557622291a6f60d739df5301771e2f4b41fdd188c8312c81c6476a9c4ef1d09","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c557622291a6f60d739df5301771e2f4b41fdd188c8312c81c6476a9c4ef1d09"}
{"level":"debug","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62ac51df6d077b947c424f5db2cd1ba455b2f25923a95410630b1639c7ed0d21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62ac51df6d077b947c424f5db2cd1ba455b2f25923a95410630b1639c7ed0d21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62ac51df6d077b947c424f5db2cd1ba455b2f25923a95410630b1639c7ed0d21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62ac51df6d077b947c424f5db2cd1ba455b2f25923a95410630b1639c7ed0d21","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62ac51df6d077b947c424f5db2cd1ba455b2f25923a95410630b1639c7ed0d21"}
{"level":"debug","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62ac51df6d077b947c424f5db2cd1ba455b2f25923a95410630b1639c7ed0d21","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62ac51df6d077b947c424f5db2cd1ba455b2f25923a95410630b1639c7ed0d21"}
{"level":"debug","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62ac51df6d077b947c424f5db2cd1ba455b2f25923a95410630b1639c7ed0d21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:39:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:39:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62ac51df6d077b947c424f5db2cd1ba455b2f25923a95410630b1639c7ed0d21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62ac51df6d077b947c424f5db2cd1ba455b2f25923a95410630b1639c7ed0d21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62ac51df6d077b947c424f5db2cd1ba455b2f25923a95410630b1639c7ed0d21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62ac51df6d077b947c424f5db2cd1ba455b2f25923a95410630b1639c7ed0d21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a49682a09f9953cb8dfd387023ca1fc05e4ad4354bb803a57658d36e544bf3f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62ac51df6d077b947c424f5db2cd1ba455b2f25923a95410630b1639c7ed0d21"}
{"level":"info","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a49682a09f9953cb8dfd387023ca1fc05e4ad4354bb803a57658d36e544bf3f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62ac51df6d077b947c424f5db2cd1ba455b2f25923a95410630b1639c7ed0d21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:39:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:39:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62ac51df6d077b947c424f5db2cd1ba455b2f25923a95410630b1639c7ed0d21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62ac51df6d077b947c424f5db2cd1ba455b2f25923a95410630b1639c7ed0d21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a49682a09f9953cb8dfd387023ca1fc05e4ad4354bb803a57658d36e544bf3f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a49682a09f9953cb8dfd387023ca1fc05e4ad4354bb803a57658d36e544bf3f6"}
{"level":"info","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a49682a09f9953cb8dfd387023ca1fc05e4ad4354bb803a57658d36e544bf3f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62ac51df6d077b947c424f5db2cd1ba455b2f25923a95410630b1639c7ed0d21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62ac51df6d077b947c424f5db2cd1ba455b2f25923a95410630b1639c7ed0d21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a49682a09f9953cb8dfd387023ca1fc05e4ad4354bb803a57658d36e544bf3f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:39:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:39:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a49682a09f9953cb8dfd387023ca1fc05e4ad4354bb803a57658d36e544bf3f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62ac51df6d077b947c424f5db2cd1ba455b2f25923a95410630b1639c7ed0d21"}
{"level":"info","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a49682a09f9953cb8dfd387023ca1fc05e4ad4354bb803a57658d36e544bf3f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62ac51df6d077b947c424f5db2cd1ba455b2f25923a95410630b1639c7ed0d21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:39:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:39:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62ac51df6d077b947c424f5db2cd1ba455b2f25923a95410630b1639c7ed0d21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a49682a09f9953cb8dfd387023ca1fc05e4ad4354bb803a57658d36e544bf3f6"}
{"level":"info","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62ac51df6d077b947c424f5db2cd1ba455b2f25923a95410630b1639c7ed0d21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a49682a09f9953cb8dfd387023ca1fc05e4ad4354bb803a57658d36e544bf3f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62ac51df6d077b947c424f5db2cd1ba455b2f25923a95410630b1639c7ed0d21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62ac51df6d077b947c424f5db2cd1ba455b2f25923a95410630b1639c7ed0d21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32f3157bedc977c426dc7f0ecba90ae8f5561803f5a88e3e504f5b512fe514aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62ac51df6d077b947c424f5db2cd1ba455b2f25923a95410630b1639c7ed0d21"}
{"level":"info","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32f3157bedc977c426dc7f0ecba90ae8f5561803f5a88e3e504f5b512fe514aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62ac51df6d077b947c424f5db2cd1ba455b2f25923a95410630b1639c7ed0d21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:39:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:39:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62ac51df6d077b947c424f5db2cd1ba455b2f25923a95410630b1639c7ed0d21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62ac51df6d077b947c424f5db2cd1ba455b2f25923a95410630b1639c7ed0d21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32f3157bedc977c426dc7f0ecba90ae8f5561803f5a88e3e504f5b512fe514aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62ac51df6d077b947c424f5db2cd1ba455b2f25923a95410630b1639c7ed0d21","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a49682a09f9953cb8dfd387023ca1fc05e4ad4354bb803a57658d36e544bf3f6"}
{"level":"debug","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32f3157bedc977c426dc7f0ecba90ae8f5561803f5a88e3e504f5b512fe514aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32f3157bedc977c426dc7f0ecba90ae8f5561803f5a88e3e504f5b512fe514aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32f3157bedc977c426dc7f0ecba90ae8f5561803f5a88e3e504f5b512fe514aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32f3157bedc977c426dc7f0ecba90ae8f5561803f5a88e3e504f5b512fe514aa"}
{"level":"debug","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32f3157bedc977c426dc7f0ecba90ae8f5561803f5a88e3e504f5b512fe514aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:39:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:39:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32f3157bedc977c426dc7f0ecba90ae8f5561803f5a88e3e504f5b512fe514aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62ac51df6d077b947c424f5db2cd1ba455b2f25923a95410630b1639c7ed0d21"}
{"level":"info","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32f3157bedc977c426dc7f0ecba90ae8f5561803f5a88e3e504f5b512fe514aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32f3157bedc977c426dc7f0ecba90ae8f5561803f5a88e3e504f5b512fe514aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32f3157bedc977c426dc7f0ecba90ae8f5561803f5a88e3e504f5b512fe514aa"}
{"level":"info","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32f3157bedc977c426dc7f0ecba90ae8f5561803f5a88e3e504f5b512fe514aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32f3157bedc977c426dc7f0ecba90ae8f5561803f5a88e3e504f5b512fe514aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32f3157bedc977c426dc7f0ecba90ae8f5561803f5a88e3e504f5b512fe514aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32f3157bedc977c426dc7f0ecba90ae8f5561803f5a88e3e504f5b512fe514aa"}
{"level":"debug","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32f3157bedc977c426dc7f0ecba90ae8f5561803f5a88e3e504f5b512fe514aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32f3157bedc977c426dc7f0ecba90ae8f5561803f5a88e3e504f5b512fe514aa"}
{"level":"debug","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32f3157bedc977c426dc7f0ecba90ae8f5561803f5a88e3e504f5b512fe514aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:39:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:39:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32f3157bedc977c426dc7f0ecba90ae8f5561803f5a88e3e504f5b512fe514aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32f3157bedc977c426dc7f0ecba90ae8f5561803f5a88e3e504f5b512fe514aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32f3157bedc977c426dc7f0ecba90ae8f5561803f5a88e3e504f5b512fe514aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32f3157bedc977c426dc7f0ecba90ae8f5561803f5a88e3e504f5b512fe514aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ae6773601adea90878b62c5f4c243bbb33b877d8a2178086df1b99b95b8eea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32f3157bedc977c426dc7f0ecba90ae8f5561803f5a88e3e504f5b512fe514aa"}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ae6773601adea90878b62c5f4c243bbb33b877d8a2178086df1b99b95b8eea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32f3157bedc977c426dc7f0ecba90ae8f5561803f5a88e3e504f5b512fe514aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32f3157bedc977c426dc7f0ecba90ae8f5561803f5a88e3e504f5b512fe514aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32f3157bedc977c426dc7f0ecba90ae8f5561803f5a88e3e504f5b512fe514aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ae6773601adea90878b62c5f4c243bbb33b877d8a2178086df1b99b95b8eea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ae6773601adea90878b62c5f4c243bbb33b877d8a2178086df1b99b95b8eea3"}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ae6773601adea90878b62c5f4c243bbb33b877d8a2178086df1b99b95b8eea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32f3157bedc977c426dc7f0ecba90ae8f5561803f5a88e3e504f5b512fe514aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32f3157bedc977c426dc7f0ecba90ae8f5561803f5a88e3e504f5b512fe514aa"}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32f3157bedc977c426dc7f0ecba90ae8f5561803f5a88e3e504f5b512fe514aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ae6773601adea90878b62c5f4c243bbb33b877d8a2178086df1b99b95b8eea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32f3157bedc977c426dc7f0ecba90ae8f5561803f5a88e3e504f5b512fe514aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32f3157bedc977c426dc7f0ecba90ae8f5561803f5a88e3e504f5b512fe514aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32f3157bedc977c426dc7f0ecba90ae8f5561803f5a88e3e504f5b512fe514aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32f3157bedc977c426dc7f0ecba90ae8f5561803f5a88e3e504f5b512fe514aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32f3157bedc977c426dc7f0ecba90ae8f5561803f5a88e3e504f5b512fe514aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ae6773601adea90878b62c5f4c243bbb33b877d8a2178086df1b99b95b8eea3"}
{"level":"error","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"32f3157bedc977c426dc7f0ecba90ae8f5561803f5a88e3e504f5b512fe514aa","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"32f3157bedc977c426dc7f0ecba90ae8f5561803f5a88e3e504f5b512fe514aa\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ae6773601adea90878b62c5f4c243bbb33b877d8a2178086df1b99b95b8eea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ae6773601adea90878b62c5f4c243bbb33b877d8a2178086df1b99b95b8eea3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ae6773601adea90878b62c5f4c243bbb33b877d8a2178086df1b99b95b8eea3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32f3157bedc977c426dc7f0ecba90ae8f5561803f5a88e3e504f5b512fe514aa"}
{"level":"debug","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32f3157bedc977c426dc7f0ecba90ae8f5561803f5a88e3e504f5b512fe514aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32f3157bedc977c426dc7f0ecba90ae8f5561803f5a88e3e504f5b512fe514aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a1492035373c1194ed017f175174ad0a63fe2ac73467ef498e9c69b3962dc99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a1492035373c1194ed017f175174ad0a63fe2ac73467ef498e9c69b3962dc99"}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a1492035373c1194ed017f175174ad0a63fe2ac73467ef498e9c69b3962dc99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ae6773601adea90878b62c5f4c243bbb33b877d8a2178086df1b99b95b8eea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ae6773601adea90878b62c5f4c243bbb33b877d8a2178086df1b99b95b8eea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32f3157bedc977c426dc7f0ecba90ae8f5561803f5a88e3e504f5b512fe514aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32f3157bedc977c426dc7f0ecba90ae8f5561803f5a88e3e504f5b512fe514aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ae6773601adea90878b62c5f4c243bbb33b877d8a2178086df1b99b95b8eea3"}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32f3157bedc977c426dc7f0ecba90ae8f5561803f5a88e3e504f5b512fe514aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a1492035373c1194ed017f175174ad0a63fe2ac73467ef498e9c69b3962dc99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a1492035373c1194ed017f175174ad0a63fe2ac73467ef498e9c69b3962dc99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32f3157bedc977c426dc7f0ecba90ae8f5561803f5a88e3e504f5b512fe514aa"}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a1492035373c1194ed017f175174ad0a63fe2ac73467ef498e9c69b3962dc99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ae6773601adea90878b62c5f4c243bbb33b877d8a2178086df1b99b95b8eea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ae6773601adea90878b62c5f4c243bbb33b877d8a2178086df1b99b95b8eea3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ae6773601adea90878b62c5f4c243bbb33b877d8a2178086df1b99b95b8eea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32f3157bedc977c426dc7f0ecba90ae8f5561803f5a88e3e504f5b512fe514aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a1492035373c1194ed017f175174ad0a63fe2ac73467ef498e9c69b3962dc99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a1492035373c1194ed017f175174ad0a63fe2ac73467ef498e9c69b3962dc99"}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a1492035373c1194ed017f175174ad0a63fe2ac73467ef498e9c69b3962dc99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ae6773601adea90878b62c5f4c243bbb33b877d8a2178086df1b99b95b8eea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ae6773601adea90878b62c5f4c243bbb33b877d8a2178086df1b99b95b8eea3"}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ae6773601adea90878b62c5f4c243bbb33b877d8a2178086df1b99b95b8eea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b55f2a8a5ba85a02ea09b9c0245ca1154bae7688b0d5f29ece40aeed4bfb9e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b55f2a8a5ba85a02ea09b9c0245ca1154bae7688b0d5f29ece40aeed4bfb9e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a1492035373c1194ed017f175174ad0a63fe2ac73467ef498e9c69b3962dc99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a1492035373c1194ed017f175174ad0a63fe2ac73467ef498e9c69b3962dc99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32f3157bedc977c426dc7f0ecba90ae8f5561803f5a88e3e504f5b512fe514aa"}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a1492035373c1194ed017f175174ad0a63fe2ac73467ef498e9c69b3962dc99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efe68d0c8f4d71ac9baa14d553d7de4f1a0de686f80564b51d495af4fe1539ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b55f2a8a5ba85a02ea09b9c0245ca1154bae7688b0d5f29ece40aeed4bfb9e5"}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efe68d0c8f4d71ac9baa14d553d7de4f1a0de686f80564b51d495af4fe1539ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ae6773601adea90878b62c5f4c243bbb33b877d8a2178086df1b99b95b8eea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ae6773601adea90878b62c5f4c243bbb33b877d8a2178086df1b99b95b8eea3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ae6773601adea90878b62c5f4c243bbb33b877d8a2178086df1b99b95b8eea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b55f2a8a5ba85a02ea09b9c0245ca1154bae7688b0d5f29ece40aeed4bfb9e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b55f2a8a5ba85a02ea09b9c0245ca1154bae7688b0d5f29ece40aeed4bfb9e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a1492035373c1194ed017f175174ad0a63fe2ac73467ef498e9c69b3962dc99"}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b55f2a8a5ba85a02ea09b9c0245ca1154bae7688b0d5f29ece40aeed4bfb9e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a1492035373c1194ed017f175174ad0a63fe2ac73467ef498e9c69b3962dc99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efe68d0c8f4d71ac9baa14d553d7de4f1a0de686f80564b51d495af4fe1539ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efe68d0c8f4d71ac9baa14d553d7de4f1a0de686f80564b51d495af4fe1539ef"}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efe68d0c8f4d71ac9baa14d553d7de4f1a0de686f80564b51d495af4fe1539ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ae6773601adea90878b62c5f4c243bbb33b877d8a2178086df1b99b95b8eea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ae6773601adea90878b62c5f4c243bbb33b877d8a2178086df1b99b95b8eea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b55f2a8a5ba85a02ea09b9c0245ca1154bae7688b0d5f29ece40aeed4bfb9e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44368b68af33727cadb08634bee24f0949fffe373923c7fea080727cefdc0808","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ae6773601adea90878b62c5f4c243bbb33b877d8a2178086df1b99b95b8eea3"}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44368b68af33727cadb08634bee24f0949fffe373923c7fea080727cefdc0808","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efe68d0c8f4d71ac9baa14d553d7de4f1a0de686f80564b51d495af4fe1539ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["efe68d0c8f4d71ac9baa14d553d7de4f1a0de686f80564b51d495af4fe1539ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b55f2a8a5ba85a02ea09b9c0245ca1154bae7688b0d5f29ece40aeed4bfb9e5"}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efe68d0c8f4d71ac9baa14d553d7de4f1a0de686f80564b51d495af4fe1539ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7fe850e24b03f4aa8296a2ee3f6a9f757890850440891c98a6e185d48cc99f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7fe850e24b03f4aa8296a2ee3f6a9f757890850440891c98a6e185d48cc99f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ae6773601adea90878b62c5f4c243bbb33b877d8a2178086df1b99b95b8eea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ae6773601adea90878b62c5f4c243bbb33b877d8a2178086df1b99b95b8eea3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44368b68af33727cadb08634bee24f0949fffe373923c7fea080727cefdc0808"}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ae6773601adea90878b62c5f4c243bbb33b877d8a2178086df1b99b95b8eea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44368b68af33727cadb08634bee24f0949fffe373923c7fea080727cefdc0808","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44368b68af33727cadb08634bee24f0949fffe373923c7fea080727cefdc0808"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44368b68af33727cadb08634bee24f0949fffe373923c7fea080727cefdc0808","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efe68d0c8f4d71ac9baa14d553d7de4f1a0de686f80564b51d495af4fe1539ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efe68d0c8f4d71ac9baa14d553d7de4f1a0de686f80564b51d495af4fe1539ef"}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efe68d0c8f4d71ac9baa14d553d7de4f1a0de686f80564b51d495af4fe1539ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7fe850e24b03f4aa8296a2ee3f6a9f757890850440891c98a6e185d48cc99f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7fe850e24b03f4aa8296a2ee3f6a9f757890850440891c98a6e185d48cc99f0"}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ae6773601adea90878b62c5f4c243bbb33b877d8a2178086df1b99b95b8eea3"}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7fe850e24b03f4aa8296a2ee3f6a9f757890850440891c98a6e185d48cc99f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ae6773601adea90878b62c5f4c243bbb33b877d8a2178086df1b99b95b8eea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44368b68af33727cadb08634bee24f0949fffe373923c7fea080727cefdc0808","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44368b68af33727cadb08634bee24f0949fffe373923c7fea080727cefdc0808"}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efe68d0c8f4d71ac9baa14d553d7de4f1a0de686f80564b51d495af4fe1539ef"}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44368b68af33727cadb08634bee24f0949fffe373923c7fea080727cefdc0808","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efe68d0c8f4d71ac9baa14d553d7de4f1a0de686f80564b51d495af4fe1539ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["efe68d0c8f4d71ac9baa14d553d7de4f1a0de686f80564b51d495af4fe1539ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efe68d0c8f4d71ac9baa14d553d7de4f1a0de686f80564b51d495af4fe1539ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7fe850e24b03f4aa8296a2ee3f6a9f757890850440891c98a6e185d48cc99f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44368b68af33727cadb08634bee24f0949fffe373923c7fea080727cefdc0808","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44368b68af33727cadb08634bee24f0949fffe373923c7fea080727cefdc0808"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7fe850e24b03f4aa8296a2ee3f6a9f757890850440891c98a6e185d48cc99f0"}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44368b68af33727cadb08634bee24f0949fffe373923c7fea080727cefdc0808","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efe68d0c8f4d71ac9baa14d553d7de4f1a0de686f80564b51d495af4fe1539ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7fe850e24b03f4aa8296a2ee3f6a9f757890850440891c98a6e185d48cc99f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7fe850e24b03f4aa8296a2ee3f6a9f757890850440891c98a6e185d48cc99f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44368b68af33727cadb08634bee24f0949fffe373923c7fea080727cefdc0808"}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efe68d0c8f4d71ac9baa14d553d7de4f1a0de686f80564b51d495af4fe1539ef"}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44368b68af33727cadb08634bee24f0949fffe373923c7fea080727cefdc0808"}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7fe850e24b03f4aa8296a2ee3f6a9f757890850440891c98a6e185d48cc99f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44368b68af33727cadb08634bee24f0949fffe373923c7fea080727cefdc0808","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7fe850e24b03f4aa8296a2ee3f6a9f757890850440891c98a6e185d48cc99f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7fe850e24b03f4aa8296a2ee3f6a9f757890850440891c98a6e185d48cc99f0"}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7fe850e24b03f4aa8296a2ee3f6a9f757890850440891c98a6e185d48cc99f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7fe850e24b03f4aa8296a2ee3f6a9f757890850440891c98a6e185d48cc99f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7fe850e24b03f4aa8296a2ee3f6a9f757890850440891c98a6e185d48cc99f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7fe850e24b03f4aa8296a2ee3f6a9f757890850440891c98a6e185d48cc99f0"}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7fe850e24b03f4aa8296a2ee3f6a9f757890850440891c98a6e185d48cc99f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7fe850e24b03f4aa8296a2ee3f6a9f757890850440891c98a6e185d48cc99f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:39:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7fe850e24b03f4aa8296a2ee3f6a9f757890850440891c98a6e185d48cc99f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7fe850e24b03f4aa8296a2ee3f6a9f757890850440891c98a6e185d48cc99f0"}
{"level":"error","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c7fe850e24b03f4aa8296a2ee3f6a9f757890850440891c98a6e185d48cc99f0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c7fe850e24b03f4aa8296a2ee3f6a9f757890850440891c98a6e185d48cc99f0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7fe850e24b03f4aa8296a2ee3f6a9f757890850440891c98a6e185d48cc99f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7fe850e24b03f4aa8296a2ee3f6a9f757890850440891c98a6e185d48cc99f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:39:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"969fcbb0-f55f-4659-9641-c0c6d306cd66","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:57324","PortSpecifier":{"PortValue":57324}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"969fcbb0-f55f-4659-9641-c0c6d306cd66","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:39:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"969fcbb0-f55f-4659-9641-c0c6d306cd66","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:57324","PortSpecifier":{"PortValue":57324}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021161,"nanos":260683929},"http":{"id":"969fcbb0-f55f-4659-9641-c0c6d306cd66","method":"POST","headers":{":authority":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:39:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"969fcbb0-f55f-4659-9641-c0c6d306cd66","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:39:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"969fcbb0-f55f-4659-9641-c0c6d306cd66","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"]}}
{"level":"debug","ts":"2026-07-02T19:39:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"969fcbb0-f55f-4659-9641-c0c6d306cd66","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:39:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"969fcbb0-f55f-4659-9641-c0c6d306cd66","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:39:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"969fcbb0-f55f-4659-9641-c0c6d306cd66","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:39:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"969fcbb0-f55f-4659-9641-c0c6d306cd66","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-74b95c/auth-test-model-74b95c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:39:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"969fcbb0-f55f-4659-9641-c0c6d306cd66","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:39:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"969fcbb0-f55f-4659-9641-c0c6d306cd66","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:39:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"969fcbb0-f55f-4659-9641-c0c6d306cd66","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T19:39:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"969fcbb0-f55f-4659-9641-c0c6d306cd66","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:39:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"969fcbb0-f55f-4659-9641-c0c6d306cd66","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:39:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"38298173-c5b1-421c-a9ac-f2a6ddc0ecd7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:41994","PortSpecifier":{"PortValue":41994}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"38298173-c5b1-421c-a9ac-f2a6ddc0ecd7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:39:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"38298173-c5b1-421c-a9ac-f2a6ddc0ecd7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:41994","PortSpecifier":{"PortValue":41994}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021161,"nanos":323958689},"http":{"id":"38298173-c5b1-421c-a9ac-f2a6ddc0ecd7","method":"POST","headers":{":authority":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:39:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"38298173-c5b1-421c-a9ac-f2a6ddc0ecd7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:39:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"38298173-c5b1-421c-a9ac-f2a6ddc0ecd7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"]}}
{"level":"debug","ts":"2026-07-02T19:39:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"38298173-c5b1-421c-a9ac-f2a6ddc0ecd7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c557622291a6f60d739df5301771e2f4b41fdd188c8312c81c6476a9c4ef1d09"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:39:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"38298173-c5b1-421c-a9ac-f2a6ddc0ecd7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:39:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"38298173-c5b1-421c-a9ac-f2a6ddc0ecd7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:39:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"38298173-c5b1-421c-a9ac-f2a6ddc0ecd7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8e566a/auth-test-model-8e566a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:39:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"38298173-c5b1-421c-a9ac-f2a6ddc0ecd7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:39:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"38298173-c5b1-421c-a9ac-f2a6ddc0ecd7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:39:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"38298173-c5b1-421c-a9ac-f2a6ddc0ecd7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T19:39:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"38298173-c5b1-421c-a9ac-f2a6ddc0ecd7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:39:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"38298173-c5b1-421c-a9ac-f2a6ddc0ecd7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:39:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3b51a0c-db96-45c3-ae6d-1eee20d55622","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:57328","PortSpecifier":{"PortValue":57328}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e3b51a0c-db96-45c3-ae6d-1eee20d55622","method":"GET","path":"/maas-api/v1/api-keys/49994ba1-fa0c-4679-b34a-a44f08f567d8","host":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:39:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3b51a0c-db96-45c3-ae6d-1eee20d55622","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:57328","PortSpecifier":{"PortValue":57328}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021161,"nanos":413562896},"http":{"id":"e3b51a0c-db96-45c3-ae6d-1eee20d55622","method":"GET","headers":{":authority":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/49994ba1-fa0c-4679-b34a-a44f08f567d8",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:39:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e3b51a0c-db96-45c3-ae6d-1eee20d55622","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:39:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e3b51a0c-db96-45c3-ae6d-1eee20d55622","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"]}}
{"level":"debug","ts":"2026-07-02T19:39:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e3b51a0c-db96-45c3-ae6d-1eee20d55622","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/49994ba1-fa0c-4679-b34a-a44f08f567d8",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:39:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3b51a0c-db96-45c3-ae6d-1eee20d55622","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:39:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3b51a0c-db96-45c3-ae6d-1eee20d55622","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:39:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3b51a0c-db96-45c3-ae6d-1eee20d55622","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-74b95c/auth-test-model-74b95c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:39:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e3b51a0c-db96-45c3-ae6d-1eee20d55622","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:39:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3b51a0c-db96-45c3-ae6d-1eee20d55622","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:39:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3b51a0c-db96-45c3-ae6d-1eee20d55622","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T19:39:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3b51a0c-db96-45c3-ae6d-1eee20d55622","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:39:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3b51a0c-db96-45c3-ae6d-1eee20d55622","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:39:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"244bd5d7-f21c-4702-90b3-62f0c4c81fc4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:41996","PortSpecifier":{"PortValue":41996}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"244bd5d7-f21c-4702-90b3-62f0c4c81fc4","method":"GET","path":"/maas-api/v1/api-keys/6e6ad61e-8f07-472f-86cf-53fe65e655ca","host":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:39:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"244bd5d7-f21c-4702-90b3-62f0c4c81fc4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:41996","PortSpecifier":{"PortValue":41996}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021161,"nanos":452887078},"http":{"id":"244bd5d7-f21c-4702-90b3-62f0c4c81fc4","method":"GET","headers":{":authority":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/6e6ad61e-8f07-472f-86cf-53fe65e655ca",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:39:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"244bd5d7-f21c-4702-90b3-62f0c4c81fc4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:39:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"244bd5d7-f21c-4702-90b3-62f0c4c81fc4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"]}}
{"level":"debug","ts":"2026-07-02T19:39:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"244bd5d7-f21c-4702-90b3-62f0c4c81fc4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c557622291a6f60d739df5301771e2f4b41fdd188c8312c81c6476a9c4ef1d09"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/6e6ad61e-8f07-472f-86cf-53fe65e655ca",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:39:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"244bd5d7-f21c-4702-90b3-62f0c4c81fc4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:39:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"244bd5d7-f21c-4702-90b3-62f0c4c81fc4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:39:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"244bd5d7-f21c-4702-90b3-62f0c4c81fc4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8e566a/auth-test-model-8e566a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:39:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"244bd5d7-f21c-4702-90b3-62f0c4c81fc4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:39:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"244bd5d7-f21c-4702-90b3-62f0c4c81fc4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:39:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"244bd5d7-f21c-4702-90b3-62f0c4c81fc4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T19:39:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"244bd5d7-f21c-4702-90b3-62f0c4c81fc4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:39:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"244bd5d7-f21c-4702-90b3-62f0c4c81fc4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:39:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f2b8719-51c3-4814-9bf8-44692c50ae25","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:45716","PortSpecifier":{"PortValue":45716}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2f2b8719-51c3-4814-9bf8-44692c50ae25","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:39:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f2b8719-51c3-4814-9bf8-44692c50ae25","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:45716","PortSpecifier":{"PortValue":45716}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021176,"nanos":434911570},"http":{"id":"2f2b8719-51c3-4814-9bf8-44692c50ae25","method":"POST","headers":{":authority":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:39:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2f2b8719-51c3-4814-9bf8-44692c50ae25","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:39:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2f2b8719-51c3-4814-9bf8-44692c50ae25","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"]}}
{"level":"debug","ts":"2026-07-02T19:39:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2f2b8719-51c3-4814-9bf8-44692c50ae25","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:39:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f2b8719-51c3-4814-9bf8-44692c50ae25","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:39:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f2b8719-51c3-4814-9bf8-44692c50ae25","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:39:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f2b8719-51c3-4814-9bf8-44692c50ae25","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-74b95c/auth-test-model-74b95c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:39:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2f2b8719-51c3-4814-9bf8-44692c50ae25","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:39:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f2b8719-51c3-4814-9bf8-44692c50ae25","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:39:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f2b8719-51c3-4814-9bf8-44692c50ae25","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T19:39:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f2b8719-51c3-4814-9bf8-44692c50ae25","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:39:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f2b8719-51c3-4814-9bf8-44692c50ae25","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:39:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dcdc8ea8-8d03-4271-895f-c2287bd53b0d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:34356","PortSpecifier":{"PortValue":34356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dcdc8ea8-8d03-4271-895f-c2287bd53b0d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:39:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dcdc8ea8-8d03-4271-895f-c2287bd53b0d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:34356","PortSpecifier":{"PortValue":34356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021176,"nanos":482118452},"http":{"id":"dcdc8ea8-8d03-4271-895f-c2287bd53b0d","method":"POST","headers":{":authority":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:39:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dcdc8ea8-8d03-4271-895f-c2287bd53b0d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:39:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dcdc8ea8-8d03-4271-895f-c2287bd53b0d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"]}}
{"level":"debug","ts":"2026-07-02T19:39:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dcdc8ea8-8d03-4271-895f-c2287bd53b0d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c557622291a6f60d739df5301771e2f4b41fdd188c8312c81c6476a9c4ef1d09"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:39:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dcdc8ea8-8d03-4271-895f-c2287bd53b0d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:39:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dcdc8ea8-8d03-4271-895f-c2287bd53b0d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:39:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dcdc8ea8-8d03-4271-895f-c2287bd53b0d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8e566a/auth-test-model-8e566a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:39:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dcdc8ea8-8d03-4271-895f-c2287bd53b0d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:39:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dcdc8ea8-8d03-4271-895f-c2287bd53b0d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:39:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dcdc8ea8-8d03-4271-895f-c2287bd53b0d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T19:39:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dcdc8ea8-8d03-4271-895f-c2287bd53b0d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:39:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dcdc8ea8-8d03-4271-895f-c2287bd53b0d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:39:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"964fe16e-eb59-48e3-9f54-7f05cb4bfefa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:45718","PortSpecifier":{"PortValue":45718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"964fe16e-eb59-48e3-9f54-7f05cb4bfefa","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:39:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"964fe16e-eb59-48e3-9f54-7f05cb4bfefa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:45718","PortSpecifier":{"PortValue":45718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021176,"nanos":524818575},"http":{"id":"964fe16e-eb59-48e3-9f54-7f05cb4bfefa","method":"GET","headers":{":authority":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:39:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"964fe16e-eb59-48e3-9f54-7f05cb4bfefa","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-r8MTEzcXqOuAhNxN_YtgJ2A1KQEuAY3NGhXp8oMhMwOzJFHyxkRwMbdh4DkB"}
{"level":"debug","ts":"2026-07-02T19:39:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"964fe16e-eb59-48e3-9f54-7f05cb4bfefa","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-r8MTEzcXqOuAhNxN_YtgJ2A1KQEuAY3NGhXp8oMhMwOzJFHyxkRwMbdh4DkB\"}"}
{"level":"debug","ts":"2026-07-02T19:39:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"964fe16e-eb59-48e3-9f54-7f05cb4bfefa","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7b623c87-6375-4bec-969c-598c04695a92","keyName":"e2e-auth-iso-a-102f2c","subscription":"e2e-auth-iso-c5424a","tenant":"e2e-shared-a-74b95c","userId":"7b623c87-6375-4bec-969c-598c04695a92","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T19:39:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"964fe16e-eb59-48e3-9f54-7f05cb4bfefa","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:39:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"964fe16e-eb59-48e3-9f54-7f05cb4bfefa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:39:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"964fe16e-eb59-48e3-9f54-7f05cb4bfefa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:39:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"964fe16e-eb59-48e3-9f54-7f05cb4bfefa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-74b95c/auth-test-model-74b95c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:39:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"964fe16e-eb59-48e3-9f54-7f05cb4bfefa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-02T19:39:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"964fe16e-eb59-48e3-9f54-7f05cb4bfefa","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:39:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"964fe16e-eb59-48e3-9f54-7f05cb4bfefa","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T19:39:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"964fe16e-eb59-48e3-9f54-7f05cb4bfefa","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-c5424a"}
{"level":"info","ts":"2026-07-02T19:39:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"964fe16e-eb59-48e3-9f54-7f05cb4bfefa","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:39:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"964fe16e-eb59-48e3-9f54-7f05cb4bfefa","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:39:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"432f8b6a-8a10-4d0e-a439-fdf0adc5682a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:44080","PortSpecifier":{"PortValue":44080}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"432f8b6a-8a10-4d0e-a439-fdf0adc5682a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:39:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"432f8b6a-8a10-4d0e-a439-fdf0adc5682a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:44080","PortSpecifier":{"PortValue":44080}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021193,"nanos":650510805},"http":{"id":"432f8b6a-8a10-4d0e-a439-fdf0adc5682a","method":"POST","headers":{":authority":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:39:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"432f8b6a-8a10-4d0e-a439-fdf0adc5682a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:39:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"432f8b6a-8a10-4d0e-a439-fdf0adc5682a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"]}}
{"level":"debug","ts":"2026-07-02T19:39:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"432f8b6a-8a10-4d0e-a439-fdf0adc5682a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:39:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"432f8b6a-8a10-4d0e-a439-fdf0adc5682a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:39:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"432f8b6a-8a10-4d0e-a439-fdf0adc5682a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:39:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"432f8b6a-8a10-4d0e-a439-fdf0adc5682a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-74b95c/auth-test-model-74b95c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:39:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"432f8b6a-8a10-4d0e-a439-fdf0adc5682a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:39:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"432f8b6a-8a10-4d0e-a439-fdf0adc5682a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T19:39:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"432f8b6a-8a10-4d0e-a439-fdf0adc5682a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T19:39:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"432f8b6a-8a10-4d0e-a439-fdf0adc5682a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:39:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"432f8b6a-8a10-4d0e-a439-fdf0adc5682a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:39:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d91176b-6878-48d0-9cd8-68f54337e64c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:36214","PortSpecifier":{"PortValue":36214}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1d91176b-6878-48d0-9cd8-68f54337e64c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:39:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d91176b-6878-48d0-9cd8-68f54337e64c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:36214","PortSpecifier":{"PortValue":36214}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021193,"nanos":686436008},"http":{"id":"1d91176b-6878-48d0-9cd8-68f54337e64c","method":"POST","headers":{":authority":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:39:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1d91176b-6878-48d0-9cd8-68f54337e64c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:39:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1d91176b-6878-48d0-9cd8-68f54337e64c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"]}}
{"level":"debug","ts":"2026-07-02T19:39:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1d91176b-6878-48d0-9cd8-68f54337e64c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c557622291a6f60d739df5301771e2f4b41fdd188c8312c81c6476a9c4ef1d09"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:39:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d91176b-6878-48d0-9cd8-68f54337e64c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:39:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d91176b-6878-48d0-9cd8-68f54337e64c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:39:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d91176b-6878-48d0-9cd8-68f54337e64c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8e566a/auth-test-model-8e566a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:39:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1d91176b-6878-48d0-9cd8-68f54337e64c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:39:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d91176b-6878-48d0-9cd8-68f54337e64c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T19:39:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d91176b-6878-48d0-9cd8-68f54337e64c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T19:39:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d91176b-6878-48d0-9cd8-68f54337e64c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:39:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d91176b-6878-48d0-9cd8-68f54337e64c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:39:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1a9c099-0c29-4b87-aa73-be594264efc0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:36230","PortSpecifier":{"PortValue":36230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e1a9c099-0c29-4b87-aa73-be594264efc0","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:39:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1a9c099-0c29-4b87-aa73-be594264efc0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:36230","PortSpecifier":{"PortValue":36230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021193,"nanos":733689679},"http":{"id":"e1a9c099-0c29-4b87-aa73-be594264efc0","method":"GET","headers":{":authority":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:39:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e1a9c099-0c29-4b87-aa73-be594264efc0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1TylsQdxtKTrdBStY_SoFBYwaENDzxV50tpj1gNsOKzpcXl4urx3ZTDloMYAz"}
{"level":"debug","ts":"2026-07-02T19:39:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e1a9c099-0c29-4b87-aa73-be594264efc0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-8e566a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1TylsQdxtKTrdBStY_SoFBYwaENDzxV50tpj1gNsOKzpcXl4urx3ZTDloMYAz\"}"}
{"level":"debug","ts":"2026-07-02T19:39:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e1a9c099-0c29-4b87-aa73-be594264efc0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-8e566a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-02T19:39:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e1a9c099-0c29-4b87-aa73-be594264efc0","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"c557622291a6f60d739df5301771e2f4b41fdd188c8312c81c6476a9c4ef1d09"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:39:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1a9c099-0c29-4b87-aa73-be594264efc0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:39:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"e1a9c099-0c29-4b87-aa73-be594264efc0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-02T19:39:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1a9c099-0c29-4b87-aa73-be594264efc0","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-02T19:39:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1a9c099-0c29-4b87-aa73-be594264efc0","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-02T19:40:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8062ca01-f8d2-4767-abed-b41ad3864289","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:50722","PortSpecifier":{"PortValue":50722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8062ca01-f8d2-4767-abed-b41ad3864289","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:40:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8062ca01-f8d2-4767-abed-b41ad3864289","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:50722","PortSpecifier":{"PortValue":50722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021210,"nanos":830130191},"http":{"id":"8062ca01-f8d2-4767-abed-b41ad3864289","method":"POST","headers":{":authority":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:40:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8062ca01-f8d2-4767-abed-b41ad3864289","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:40:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8062ca01-f8d2-4767-abed-b41ad3864289","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"]}}
{"level":"debug","ts":"2026-07-02T19:40:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8062ca01-f8d2-4767-abed-b41ad3864289","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:40:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8062ca01-f8d2-4767-abed-b41ad3864289","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:40:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8062ca01-f8d2-4767-abed-b41ad3864289","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:40:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8062ca01-f8d2-4767-abed-b41ad3864289","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-74b95c/auth-test-model-74b95c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:40:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8062ca01-f8d2-4767-abed-b41ad3864289","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:40:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8062ca01-f8d2-4767-abed-b41ad3864289","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:40:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8062ca01-f8d2-4767-abed-b41ad3864289","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T19:40:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8062ca01-f8d2-4767-abed-b41ad3864289","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:40:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8062ca01-f8d2-4767-abed-b41ad3864289","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:40:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5939e768-874e-4d55-a55f-a3b0eef7c9c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:60928","PortSpecifier":{"PortValue":60928}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5939e768-874e-4d55-a55f-a3b0eef7c9c9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:40:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5939e768-874e-4d55-a55f-a3b0eef7c9c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:60928","PortSpecifier":{"PortValue":60928}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021210,"nanos":866053173},"http":{"id":"5939e768-874e-4d55-a55f-a3b0eef7c9c9","method":"POST","headers":{":authority":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:40:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5939e768-874e-4d55-a55f-a3b0eef7c9c9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:40:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5939e768-874e-4d55-a55f-a3b0eef7c9c9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"]}}
{"level":"debug","ts":"2026-07-02T19:40:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5939e768-874e-4d55-a55f-a3b0eef7c9c9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c557622291a6f60d739df5301771e2f4b41fdd188c8312c81c6476a9c4ef1d09"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:40:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5939e768-874e-4d55-a55f-a3b0eef7c9c9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:40:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5939e768-874e-4d55-a55f-a3b0eef7c9c9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:40:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5939e768-874e-4d55-a55f-a3b0eef7c9c9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8e566a/auth-test-model-8e566a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:40:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5939e768-874e-4d55-a55f-a3b0eef7c9c9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:40:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5939e768-874e-4d55-a55f-a3b0eef7c9c9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:40:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5939e768-874e-4d55-a55f-a3b0eef7c9c9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T19:40:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5939e768-874e-4d55-a55f-a3b0eef7c9c9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:40:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5939e768-874e-4d55-a55f-a3b0eef7c9c9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:40:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"457ce588-c8c6-4887-abe1-afed00ff0e6a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:50734","PortSpecifier":{"PortValue":50734}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"457ce588-c8c6-4887-abe1-afed00ff0e6a","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:40:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"457ce588-c8c6-4887-abe1-afed00ff0e6a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:50734","PortSpecifier":{"PortValue":50734}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021210,"nanos":908606071},"http":{"id":"457ce588-c8c6-4887-abe1-afed00ff0e6a","method":"POST","headers":{":authority":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:40:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"457ce588-c8c6-4887-abe1-afed00ff0e6a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:40:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"457ce588-c8c6-4887-abe1-afed00ff0e6a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"]}}
{"level":"debug","ts":"2026-07-02T19:40:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"457ce588-c8c6-4887-abe1-afed00ff0e6a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:40:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"457ce588-c8c6-4887-abe1-afed00ff0e6a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:40:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"457ce588-c8c6-4887-abe1-afed00ff0e6a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:40:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"457ce588-c8c6-4887-abe1-afed00ff0e6a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-74b95c/auth-test-model-74b95c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:40:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"457ce588-c8c6-4887-abe1-afed00ff0e6a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:40:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"457ce588-c8c6-4887-abe1-afed00ff0e6a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:40:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"457ce588-c8c6-4887-abe1-afed00ff0e6a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T19:40:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"457ce588-c8c6-4887-abe1-afed00ff0e6a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:40:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"457ce588-c8c6-4887-abe1-afed00ff0e6a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:40:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"344a6fc0-056b-47db-93d6-60fc99087f98","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:60936","PortSpecifier":{"PortValue":60936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"344a6fc0-056b-47db-93d6-60fc99087f98","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:40:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"344a6fc0-056b-47db-93d6-60fc99087f98","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:60936","PortSpecifier":{"PortValue":60936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021210,"nanos":948362110},"http":{"id":"344a6fc0-056b-47db-93d6-60fc99087f98","method":"POST","headers":{":authority":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:40:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"344a6fc0-056b-47db-93d6-60fc99087f98","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:40:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"344a6fc0-056b-47db-93d6-60fc99087f98","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"]}}
{"level":"debug","ts":"2026-07-02T19:40:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"344a6fc0-056b-47db-93d6-60fc99087f98","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c557622291a6f60d739df5301771e2f4b41fdd188c8312c81c6476a9c4ef1d09"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:40:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"344a6fc0-056b-47db-93d6-60fc99087f98","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:40:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"344a6fc0-056b-47db-93d6-60fc99087f98","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:40:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"344a6fc0-056b-47db-93d6-60fc99087f98","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8e566a/auth-test-model-8e566a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:40:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"344a6fc0-056b-47db-93d6-60fc99087f98","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:40:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"344a6fc0-056b-47db-93d6-60fc99087f98","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:40:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"344a6fc0-056b-47db-93d6-60fc99087f98","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T19:40:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"344a6fc0-056b-47db-93d6-60fc99087f98","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:40:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"344a6fc0-056b-47db-93d6-60fc99087f98","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:40:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5aebb158-6b8d-4240-88af-b4ee8d88b402","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:42056","PortSpecifier":{"PortValue":42056}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5aebb158-6b8d-4240-88af-b4ee8d88b402","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:40:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5aebb158-6b8d-4240-88af-b4ee8d88b402","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:42056","PortSpecifier":{"PortValue":42056}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021228,"nanos":85444620},"http":{"id":"5aebb158-6b8d-4240-88af-b4ee8d88b402","method":"POST","headers":{":authority":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:40:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5aebb158-6b8d-4240-88af-b4ee8d88b402","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:40:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5aebb158-6b8d-4240-88af-b4ee8d88b402","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"]}}
{"level":"debug","ts":"2026-07-02T19:40:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5aebb158-6b8d-4240-88af-b4ee8d88b402","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:40:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5aebb158-6b8d-4240-88af-b4ee8d88b402","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:40:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5aebb158-6b8d-4240-88af-b4ee8d88b402","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:40:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5aebb158-6b8d-4240-88af-b4ee8d88b402","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-74b95c/auth-test-model-74b95c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:40:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5aebb158-6b8d-4240-88af-b4ee8d88b402","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:40:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5aebb158-6b8d-4240-88af-b4ee8d88b402","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:40:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5aebb158-6b8d-4240-88af-b4ee8d88b402","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T19:40:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5aebb158-6b8d-4240-88af-b4ee8d88b402","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:40:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5aebb158-6b8d-4240-88af-b4ee8d88b402","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:40:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09ef3575-afd2-4354-8e15-3180cf9281c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:44492","PortSpecifier":{"PortValue":44492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"09ef3575-afd2-4354-8e15-3180cf9281c8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:40:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09ef3575-afd2-4354-8e15-3180cf9281c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:44492","PortSpecifier":{"PortValue":44492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021228,"nanos":121447344},"http":{"id":"09ef3575-afd2-4354-8e15-3180cf9281c8","method":"POST","headers":{":authority":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:40:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"09ef3575-afd2-4354-8e15-3180cf9281c8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:40:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"09ef3575-afd2-4354-8e15-3180cf9281c8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"]}}
{"level":"debug","ts":"2026-07-02T19:40:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"09ef3575-afd2-4354-8e15-3180cf9281c8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c557622291a6f60d739df5301771e2f4b41fdd188c8312c81c6476a9c4ef1d09"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:40:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09ef3575-afd2-4354-8e15-3180cf9281c8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:40:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09ef3575-afd2-4354-8e15-3180cf9281c8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:40:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09ef3575-afd2-4354-8e15-3180cf9281c8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8e566a/auth-test-model-8e566a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:40:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"09ef3575-afd2-4354-8e15-3180cf9281c8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:40:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09ef3575-afd2-4354-8e15-3180cf9281c8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:40:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09ef3575-afd2-4354-8e15-3180cf9281c8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T19:40:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09ef3575-afd2-4354-8e15-3180cf9281c8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:40:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09ef3575-afd2-4354-8e15-3180cf9281c8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:40:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5c6e771-2f80-4c21-8820-bfa291daa74c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:44500","PortSpecifier":{"PortValue":44500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c5c6e771-2f80-4c21-8820-bfa291daa74c","method":"GET","path":"/maas-api/v1/api-keys/89c01766-e1ac-4def-87a0-1a112c717465","host":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:40:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5c6e771-2f80-4c21-8820-bfa291daa74c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:44500","PortSpecifier":{"PortValue":44500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021228,"nanos":159231741},"http":{"id":"c5c6e771-2f80-4c21-8820-bfa291daa74c","method":"GET","headers":{":authority":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/89c01766-e1ac-4def-87a0-1a112c717465",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:40:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c5c6e771-2f80-4c21-8820-bfa291daa74c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:40:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c5c6e771-2f80-4c21-8820-bfa291daa74c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"]}}
{"level":"debug","ts":"2026-07-02T19:40:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c5c6e771-2f80-4c21-8820-bfa291daa74c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c557622291a6f60d739df5301771e2f4b41fdd188c8312c81c6476a9c4ef1d09"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/89c01766-e1ac-4def-87a0-1a112c717465",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:40:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5c6e771-2f80-4c21-8820-bfa291daa74c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:40:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5c6e771-2f80-4c21-8820-bfa291daa74c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:40:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5c6e771-2f80-4c21-8820-bfa291daa74c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8e566a/auth-test-model-8e566a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:40:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c5c6e771-2f80-4c21-8820-bfa291daa74c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:40:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5c6e771-2f80-4c21-8820-bfa291daa74c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:40:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5c6e771-2f80-4c21-8820-bfa291daa74c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T19:40:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5c6e771-2f80-4c21-8820-bfa291daa74c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:40:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5c6e771-2f80-4c21-8820-bfa291daa74c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:40:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66306547-fb81-4aba-a2c8-e65dd72a87d6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:42060","PortSpecifier":{"PortValue":42060}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"66306547-fb81-4aba-a2c8-e65dd72a87d6","method":"GET","path":"/maas-api/v1/api-keys/89c01766-e1ac-4def-87a0-1a112c717465","host":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:40:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66306547-fb81-4aba-a2c8-e65dd72a87d6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:42060","PortSpecifier":{"PortValue":42060}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021228,"nanos":194196251},"http":{"id":"66306547-fb81-4aba-a2c8-e65dd72a87d6","method":"GET","headers":{":authority":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/89c01766-e1ac-4def-87a0-1a112c717465",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:40:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"66306547-fb81-4aba-a2c8-e65dd72a87d6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:40:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"66306547-fb81-4aba-a2c8-e65dd72a87d6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"]}}
{"level":"debug","ts":"2026-07-02T19:40:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"66306547-fb81-4aba-a2c8-e65dd72a87d6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/89c01766-e1ac-4def-87a0-1a112c717465",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:40:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66306547-fb81-4aba-a2c8-e65dd72a87d6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:40:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66306547-fb81-4aba-a2c8-e65dd72a87d6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:40:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66306547-fb81-4aba-a2c8-e65dd72a87d6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-74b95c/auth-test-model-74b95c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:40:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"66306547-fb81-4aba-a2c8-e65dd72a87d6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:40:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66306547-fb81-4aba-a2c8-e65dd72a87d6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:40:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66306547-fb81-4aba-a2c8-e65dd72a87d6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T19:40:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66306547-fb81-4aba-a2c8-e65dd72a87d6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:40:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66306547-fb81-4aba-a2c8-e65dd72a87d6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:40:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"071ddea1-e02e-4794-9169-043ae133a896","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:45640","PortSpecifier":{"PortValue":45640}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"071ddea1-e02e-4794-9169-043ae133a896","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:40:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"071ddea1-e02e-4794-9169-043ae133a896","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:45640","PortSpecifier":{"PortValue":45640}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021245,"nanos":347093826},"http":{"id":"071ddea1-e02e-4794-9169-043ae133a896","method":"POST","headers":{":authority":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:40:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"071ddea1-e02e-4794-9169-043ae133a896","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:40:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"071ddea1-e02e-4794-9169-043ae133a896","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"]}}
{"level":"debug","ts":"2026-07-02T19:40:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"071ddea1-e02e-4794-9169-043ae133a896","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:40:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"071ddea1-e02e-4794-9169-043ae133a896","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:40:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"071ddea1-e02e-4794-9169-043ae133a896","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:40:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"071ddea1-e02e-4794-9169-043ae133a896","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-74b95c/auth-test-model-74b95c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:40:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"071ddea1-e02e-4794-9169-043ae133a896","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:40:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"071ddea1-e02e-4794-9169-043ae133a896","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:40:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"071ddea1-e02e-4794-9169-043ae133a896","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T19:40:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"071ddea1-e02e-4794-9169-043ae133a896","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:40:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"071ddea1-e02e-4794-9169-043ae133a896","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:40:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e25baa5e-694b-4f4f-a0d1-abbcddb0fbf4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:44294","PortSpecifier":{"PortValue":44294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e25baa5e-694b-4f4f-a0d1-abbcddb0fbf4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:40:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e25baa5e-694b-4f4f-a0d1-abbcddb0fbf4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:44294","PortSpecifier":{"PortValue":44294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021245,"nanos":388430758},"http":{"id":"e25baa5e-694b-4f4f-a0d1-abbcddb0fbf4","method":"POST","headers":{":authority":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:40:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e25baa5e-694b-4f4f-a0d1-abbcddb0fbf4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:40:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e25baa5e-694b-4f4f-a0d1-abbcddb0fbf4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"]}}
{"level":"debug","ts":"2026-07-02T19:40:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e25baa5e-694b-4f4f-a0d1-abbcddb0fbf4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c557622291a6f60d739df5301771e2f4b41fdd188c8312c81c6476a9c4ef1d09"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:40:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e25baa5e-694b-4f4f-a0d1-abbcddb0fbf4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:40:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e25baa5e-694b-4f4f-a0d1-abbcddb0fbf4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:40:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e25baa5e-694b-4f4f-a0d1-abbcddb0fbf4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8e566a/auth-test-model-8e566a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:40:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e25baa5e-694b-4f4f-a0d1-abbcddb0fbf4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:40:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e25baa5e-694b-4f4f-a0d1-abbcddb0fbf4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:40:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e25baa5e-694b-4f4f-a0d1-abbcddb0fbf4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T19:40:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e25baa5e-694b-4f4f-a0d1-abbcddb0fbf4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:40:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e25baa5e-694b-4f4f-a0d1-abbcddb0fbf4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:40:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"62408cf9-7af6-4c6f-a687-e32ac1146524","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:45656","PortSpecifier":{"PortValue":45656}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"62408cf9-7af6-4c6f-a687-e32ac1146524","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:40:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"62408cf9-7af6-4c6f-a687-e32ac1146524","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:45656","PortSpecifier":{"PortValue":45656}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021245,"nanos":426926872},"http":{"id":"62408cf9-7af6-4c6f-a687-e32ac1146524","method":"POST","headers":{":authority":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:40:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"62408cf9-7af6-4c6f-a687-e32ac1146524","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1aguQYqbm83BHDWBV_Iqfkk2zIIp43hDcKTt5KJiv71B66wHHNjzna44Wo4vJ"}
{"level":"debug","ts":"2026-07-02T19:40:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"62408cf9-7af6-4c6f-a687-e32ac1146524","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1aguQYqbm83BHDWBV_Iqfkk2zIIp43hDcKTt5KJiv71B66wHHNjzna44Wo4vJ\"}"}
{"level":"debug","ts":"2026-07-02T19:40:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"62408cf9-7af6-4c6f-a687-e32ac1146524","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"326704ec-073d-47c2-9918-320dfa0a03c2","keyName":"e2e-auth-iso-a-01e0d0","subscription":"e2e-auth-iso-82ab30","tenant":"e2e-shared-a-74b95c","userId":"326704ec-073d-47c2-9918-320dfa0a03c2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T19:40:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"62408cf9-7af6-4c6f-a687-e32ac1146524","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:40:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62408cf9-7af6-4c6f-a687-e32ac1146524","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:40:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62408cf9-7af6-4c6f-a687-e32ac1146524","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:40:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62408cf9-7af6-4c6f-a687-e32ac1146524","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-74b95c/auth-test-model-74b95c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:40:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62408cf9-7af6-4c6f-a687-e32ac1146524","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-82ab30"}
{"level":"debug","ts":"2026-07-02T19:40:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"62408cf9-7af6-4c6f-a687-e32ac1146524","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-02T19:40:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62408cf9-7af6-4c6f-a687-e32ac1146524","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:40:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62408cf9-7af6-4c6f-a687-e32ac1146524","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T19:40:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"62408cf9-7af6-4c6f-a687-e32ac1146524","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:40:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"62408cf9-7af6-4c6f-a687-e32ac1146524","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:40:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c022103f0ceab179e08f8068b0abcf2290b9406e2e77928b2c531aeb1f8c9dd"}
{"level":"info","ts":"2026-07-02T19:40:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d44061d488af72227f3eab0ea2e7df61ea828446794c90ad0f008dc06686ffa"}
{"level":"info","ts":"2026-07-02T19:40:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/700e5a1a495f21d19d2382b551df80f528a77448d0a93799856a78ba8b0ebcbb"}
{"level":"info","ts":"2026-07-02T19:40:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5686dae325210ea4f17af6afa6b10268b2332899fde83dff2de58dcbede96906"}
{"level":"info","ts":"2026-07-02T19:40:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d03a739385b508448a980c6f029841e3238b5ba64938e6c8e7fe520b7ce68ef"}
{"level":"info","ts":"2026-07-02T19:40:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/304a51d110363910cfe0a800658dca10a29ff3c66b38ce9ad986a6176feec0d3"}
{"level":"info","ts":"2026-07-02T19:40:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/085f05b6f7a7b53117c0c3d8bfa3599d01e33582bb4cae6e9fcf49971ce3f444"}
{"level":"info","ts":"2026-07-02T19:40:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/822dcd7b5c838d08b0adab814721ef9589431e2a3c6ebd2669fece01c1d9c880"}
{"level":"debug","ts":"2026-07-02T19:41:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c55eb8f29fa63e4dd41e6d3e3b742e860db2b172672c06ec001b4bfe6d532e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c55eb8f29fa63e4dd41e6d3e3b742e860db2b172672c06ec001b4bfe6d532e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c55eb8f29fa63e4dd41e6d3e3b742e860db2b172672c06ec001b4bfe6d532e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c55eb8f29fa63e4dd41e6d3e3b742e860db2b172672c06ec001b4bfe6d532e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c55eb8f29fa63e4dd41e6d3e3b742e860db2b172672c06ec001b4bfe6d532e2"}
{"level":"debug","ts":"2026-07-02T19:41:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c55eb8f29fa63e4dd41e6d3e3b742e860db2b172672c06ec001b4bfe6d532e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c55eb8f29fa63e4dd41e6d3e3b742e860db2b172672c06ec001b4bfe6d532e2"}
{"level":"debug","ts":"2026-07-02T19:41:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c55eb8f29fa63e4dd41e6d3e3b742e860db2b172672c06ec001b4bfe6d532e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c55eb8f29fa63e4dd41e6d3e3b742e860db2b172672c06ec001b4bfe6d532e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c55eb8f29fa63e4dd41e6d3e3b742e860db2b172672c06ec001b4bfe6d532e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c55eb8f29fa63e4dd41e6d3e3b742e860db2b172672c06ec001b4bfe6d532e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c55eb8f29fa63e4dd41e6d3e3b742e860db2b172672c06ec001b4bfe6d532e2"}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e14b87ab2091f0f46234cff748c5598c261ceef289bc6421a004f1b0c6176006","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e14b87ab2091f0f46234cff748c5598c261ceef289bc6421a004f1b0c6176006","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e14b87ab2091f0f46234cff748c5598c261ceef289bc6421a004f1b0c6176006","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e14b87ab2091f0f46234cff748c5598c261ceef289bc6421a004f1b0c6176006","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e14b87ab2091f0f46234cff748c5598c261ceef289bc6421a004f1b0c6176006"}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e14b87ab2091f0f46234cff748c5598c261ceef289bc6421a004f1b0c6176006","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e14b87ab2091f0f46234cff748c5598c261ceef289bc6421a004f1b0c6176006"}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e14b87ab2091f0f46234cff748c5598c261ceef289bc6421a004f1b0c6176006","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e14b87ab2091f0f46234cff748c5598c261ceef289bc6421a004f1b0c6176006"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e14b87ab2091f0f46234cff748c5598c261ceef289bc6421a004f1b0c6176006","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e14b87ab2091f0f46234cff748c5598c261ceef289bc6421a004f1b0c6176006","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e14b87ab2091f0f46234cff748c5598c261ceef289bc6421a004f1b0c6176006","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e14b87ab2091f0f46234cff748c5598c261ceef289bc6421a004f1b0c6176006","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e14b87ab2091f0f46234cff748c5598c261ceef289bc6421a004f1b0c6176006","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e14b87ab2091f0f46234cff748c5598c261ceef289bc6421a004f1b0c6176006"}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e14b87ab2091f0f46234cff748c5598c261ceef289bc6421a004f1b0c6176006","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e14b87ab2091f0f46234cff748c5598c261ceef289bc6421a004f1b0c6176006"}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e14b87ab2091f0f46234cff748c5598c261ceef289bc6421a004f1b0c6176006","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e14b87ab2091f0f46234cff748c5598c261ceef289bc6421a004f1b0c6176006"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e14b87ab2091f0f46234cff748c5598c261ceef289bc6421a004f1b0c6176006","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e14b87ab2091f0f46234cff748c5598c261ceef289bc6421a004f1b0c6176006","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e14b87ab2091f0f46234cff748c5598c261ceef289bc6421a004f1b0c6176006"}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773"}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773"}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86d4818950e075365e3575e6e3bd6ddb6986e0c0b318d96e7c1ab0c7bb366cdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86d4818950e075365e3575e6e3bd6ddb6986e0c0b318d96e7c1ab0c7bb366cdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86d4818950e075365e3575e6e3bd6ddb6986e0c0b318d96e7c1ab0c7bb366cdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86d4818950e075365e3575e6e3bd6ddb6986e0c0b318d96e7c1ab0c7bb366cdf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86d4818950e075365e3575e6e3bd6ddb6986e0c0b318d96e7c1ab0c7bb366cdf"}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86d4818950e075365e3575e6e3bd6ddb6986e0c0b318d96e7c1ab0c7bb366cdf"}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86d4818950e075365e3575e6e3bd6ddb6986e0c0b318d96e7c1ab0c7bb366cdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86d4818950e075365e3575e6e3bd6ddb6986e0c0b318d96e7c1ab0c7bb366cdf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86d4818950e075365e3575e6e3bd6ddb6986e0c0b318d96e7c1ab0c7bb366cdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773"}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86d4818950e075365e3575e6e3bd6ddb6986e0c0b318d96e7c1ab0c7bb366cdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86d4818950e075365e3575e6e3bd6ddb6986e0c0b318d96e7c1ab0c7bb366cdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86d4818950e075365e3575e6e3bd6ddb6986e0c0b318d96e7c1ab0c7bb366cdf"}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86d4818950e075365e3575e6e3bd6ddb6986e0c0b318d96e7c1ab0c7bb366cdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86d4818950e075365e3575e6e3bd6ddb6986e0c0b318d96e7c1ab0c7bb366cdf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86d4818950e075365e3575e6e3bd6ddb6986e0c0b318d96e7c1ab0c7bb366cdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773"}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86d4818950e075365e3575e6e3bd6ddb6986e0c0b318d96e7c1ab0c7bb366cdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86d4818950e075365e3575e6e3bd6ddb6986e0c0b318d96e7c1ab0c7bb366cdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86d4818950e075365e3575e6e3bd6ddb6986e0c0b318d96e7c1ab0c7bb366cdf"}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86d4818950e075365e3575e6e3bd6ddb6986e0c0b318d96e7c1ab0c7bb366cdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86d4818950e075365e3575e6e3bd6ddb6986e0c0b318d96e7c1ab0c7bb366cdf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773"}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86d4818950e075365e3575e6e3bd6ddb6986e0c0b318d96e7c1ab0c7bb366cdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86d4818950e075365e3575e6e3bd6ddb6986e0c0b318d96e7c1ab0c7bb366cdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86d4818950e075365e3575e6e3bd6ddb6986e0c0b318d96e7c1ab0c7bb366cdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86d4818950e075365e3575e6e3bd6ddb6986e0c0b318d96e7c1ab0c7bb366cdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86d4818950e075365e3575e6e3bd6ddb6986e0c0b318d96e7c1ab0c7bb366cdf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86d4818950e075365e3575e6e3bd6ddb6986e0c0b318d96e7c1ab0c7bb366cdf"}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86d4818950e075365e3575e6e3bd6ddb6986e0c0b318d96e7c1ab0c7bb366cdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86d4818950e075365e3575e6e3bd6ddb6986e0c0b318d96e7c1ab0c7bb366cdf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773"}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86d4818950e075365e3575e6e3bd6ddb6986e0c0b318d96e7c1ab0c7bb366cdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86d4818950e075365e3575e6e3bd6ddb6986e0c0b318d96e7c1ab0c7bb366cdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86d4818950e075365e3575e6e3bd6ddb6986e0c0b318d96e7c1ab0c7bb366cdf"}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86d4818950e075365e3575e6e3bd6ddb6986e0c0b318d96e7c1ab0c7bb366cdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86d4818950e075365e3575e6e3bd6ddb6986e0c0b318d96e7c1ab0c7bb366cdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86d4818950e075365e3575e6e3bd6ddb6986e0c0b318d96e7c1ab0c7bb366cdf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86d4818950e075365e3575e6e3bd6ddb6986e0c0b318d96e7c1ab0c7bb366cdf"}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86d4818950e075365e3575e6e3bd6ddb6986e0c0b318d96e7c1ab0c7bb366cdf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86d4818950e075365e3575e6e3bd6ddb6986e0c0b318d96e7c1ab0c7bb366cdf"}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7681b628cd7cd9675a0a3486834654bc2854ddbfa028d3d5d459056b0d2411ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7681b628cd7cd9675a0a3486834654bc2854ddbfa028d3d5d459056b0d2411ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86d4818950e075365e3575e6e3bd6ddb6986e0c0b318d96e7c1ab0c7bb366cdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86d4818950e075365e3575e6e3bd6ddb6986e0c0b318d96e7c1ab0c7bb366cdf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7681b628cd7cd9675a0a3486834654bc2854ddbfa028d3d5d459056b0d2411ba"}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86d4818950e075365e3575e6e3bd6ddb6986e0c0b318d96e7c1ab0c7bb366cdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7681b628cd7cd9675a0a3486834654bc2854ddbfa028d3d5d459056b0d2411ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7681b628cd7cd9675a0a3486834654bc2854ddbfa028d3d5d459056b0d2411ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86d4818950e075365e3575e6e3bd6ddb6986e0c0b318d96e7c1ab0c7bb366cdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7681b628cd7cd9675a0a3486834654bc2854ddbfa028d3d5d459056b0d2411ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7681b628cd7cd9675a0a3486834654bc2854ddbfa028d3d5d459056b0d2411ba"}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7681b628cd7cd9675a0a3486834654bc2854ddbfa028d3d5d459056b0d2411ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7681b628cd7cd9675a0a3486834654bc2854ddbfa028d3d5d459056b0d2411ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7681b628cd7cd9675a0a3486834654bc2854ddbfa028d3d5d459056b0d2411ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7681b628cd7cd9675a0a3486834654bc2854ddbfa028d3d5d459056b0d2411ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86d4818950e075365e3575e6e3bd6ddb6986e0c0b318d96e7c1ab0c7bb366cdf"}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7681b628cd7cd9675a0a3486834654bc2854ddbfa028d3d5d459056b0d2411ba"}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"818eca6818843a438f4563e2743829884bd75ef6eaacaf3262ff61bf537ba5d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"818eca6818843a438f4563e2743829884bd75ef6eaacaf3262ff61bf537ba5d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36d4eb9f301acac3ee0ba6f72b010b9949953e03d5370277d3f1a18fefb726e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/818eca6818843a438f4563e2743829884bd75ef6eaacaf3262ff61bf537ba5d7"}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36d4eb9f301acac3ee0ba6f72b010b9949953e03d5370277d3f1a18fefb726e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"818eca6818843a438f4563e2743829884bd75ef6eaacaf3262ff61bf537ba5d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["818eca6818843a438f4563e2743829884bd75ef6eaacaf3262ff61bf537ba5d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"818eca6818843a438f4563e2743829884bd75ef6eaacaf3262ff61bf537ba5d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6670e9cd032934180e4c4a39c982a69ecceb87666be868c6612b974798c90b18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36d4eb9f301acac3ee0ba6f72b010b9949953e03d5370277d3f1a18fefb726e4"}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6670e9cd032934180e4c4a39c982a69ecceb87666be868c6612b974798c90b18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36d4eb9f301acac3ee0ba6f72b010b9949953e03d5370277d3f1a18fefb726e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36d4eb9f301acac3ee0ba6f72b010b9949953e03d5370277d3f1a18fefb726e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/818eca6818843a438f4563e2743829884bd75ef6eaacaf3262ff61bf537ba5d7"}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36d4eb9f301acac3ee0ba6f72b010b9949953e03d5370277d3f1a18fefb726e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"818eca6818843a438f4563e2743829884bd75ef6eaacaf3262ff61bf537ba5d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6670e9cd032934180e4c4a39c982a69ecceb87666be868c6612b974798c90b18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6670e9cd032934180e4c4a39c982a69ecceb87666be868c6612b974798c90b18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36d4eb9f301acac3ee0ba6f72b010b9949953e03d5370277d3f1a18fefb726e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6670e9cd032934180e4c4a39c982a69ecceb87666be868c6612b974798c90b18","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6670e9cd032934180e4c4a39c982a69ecceb87666be868c6612b974798c90b18"}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6670e9cd032934180e4c4a39c982a69ecceb87666be868c6612b974798c90b18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6670e9cd032934180e4c4a39c982a69ecceb87666be868c6612b974798c90b18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6670e9cd032934180e4c4a39c982a69ecceb87666be868c6612b974798c90b18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6670e9cd032934180e4c4a39c982a69ecceb87666be868c6612b974798c90b18","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36d4eb9f301acac3ee0ba6f72b010b9949953e03d5370277d3f1a18fefb726e4"}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6670e9cd032934180e4c4a39c982a69ecceb87666be868c6612b974798c90b18"}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/62ac51df6d077b947c424f5db2cd1ba455b2f25923a95410630b1639c7ed0d21"}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/32f3157bedc977c426dc7f0ecba90ae8f5561803f5a88e3e504f5b512fe514aa"}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b55f2a8a5ba85a02ea09b9c0245ca1154bae7688b0d5f29ece40aeed4bfb9e5"}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c7fe850e24b03f4aa8296a2ee3f6a9f757890850440891c98a6e185d48cc99f0"}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/efe68d0c8f4d71ac9baa14d553d7de4f1a0de686f80564b51d495af4fe1539ef"}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ae6773601adea90878b62c5f4c243bbb33b877d8a2178086df1b99b95b8eea3"}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a49682a09f9953cb8dfd387023ca1fc05e4ad4354bb803a57658d36e544bf3f6"}
{"level":"info","ts":"2026-07-02T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/44368b68af33727cadb08634bee24f0949fffe373923c7fea080727cefdc0808"}
{"level":"debug","ts":"2026-07-02T19:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6607358ac73d864f4621b8274a9b7bf3221ff4a4de1d5c30b642f358ed1c8c00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6607358ac73d864f4621b8274a9b7bf3221ff4a4de1d5c30b642f358ed1c8c00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6607358ac73d864f4621b8274a9b7bf3221ff4a4de1d5c30b642f358ed1c8c00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6607358ac73d864f4621b8274a9b7bf3221ff4a4de1d5c30b642f358ed1c8c00","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6607358ac73d864f4621b8274a9b7bf3221ff4a4de1d5c30b642f358ed1c8c00"}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6607358ac73d864f4621b8274a9b7bf3221ff4a4de1d5c30b642f358ed1c8c00","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6607358ac73d864f4621b8274a9b7bf3221ff4a4de1d5c30b642f358ed1c8c00"}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6607358ac73d864f4621b8274a9b7bf3221ff4a4de1d5c30b642f358ed1c8c00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6607358ac73d864f4621b8274a9b7bf3221ff4a4de1d5c30b642f358ed1c8c00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6607358ac73d864f4621b8274a9b7bf3221ff4a4de1d5c30b642f358ed1c8c00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6607358ac73d864f4621b8274a9b7bf3221ff4a4de1d5c30b642f358ed1c8c00","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6607358ac73d864f4621b8274a9b7bf3221ff4a4de1d5c30b642f358ed1c8c00"}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"180a5536bc5069865e3e707c3936c71d3a6d6e368ec3a642e2041c92038699e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"180a5536bc5069865e3e707c3936c71d3a6d6e368ec3a642e2041c92038699e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"180a5536bc5069865e3e707c3936c71d3a6d6e368ec3a642e2041c92038699e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"180a5536bc5069865e3e707c3936c71d3a6d6e368ec3a642e2041c92038699e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/180a5536bc5069865e3e707c3936c71d3a6d6e368ec3a642e2041c92038699e2"}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"180a5536bc5069865e3e707c3936c71d3a6d6e368ec3a642e2041c92038699e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/180a5536bc5069865e3e707c3936c71d3a6d6e368ec3a642e2041c92038699e2"}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"180a5536bc5069865e3e707c3936c71d3a6d6e368ec3a642e2041c92038699e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["180a5536bc5069865e3e707c3936c71d3a6d6e368ec3a642e2041c92038699e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"180a5536bc5069865e3e707c3936c71d3a6d6e368ec3a642e2041c92038699e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"180a5536bc5069865e3e707c3936c71d3a6d6e368ec3a642e2041c92038699e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"180a5536bc5069865e3e707c3936c71d3a6d6e368ec3a642e2041c92038699e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"180a5536bc5069865e3e707c3936c71d3a6d6e368ec3a642e2041c92038699e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"180a5536bc5069865e3e707c3936c71d3a6d6e368ec3a642e2041c92038699e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/180a5536bc5069865e3e707c3936c71d3a6d6e368ec3a642e2041c92038699e2"}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"180a5536bc5069865e3e707c3936c71d3a6d6e368ec3a642e2041c92038699e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/180a5536bc5069865e3e707c3936c71d3a6d6e368ec3a642e2041c92038699e2"}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"180a5536bc5069865e3e707c3936c71d3a6d6e368ec3a642e2041c92038699e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["180a5536bc5069865e3e707c3936c71d3a6d6e368ec3a642e2041c92038699e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"180a5536bc5069865e3e707c3936c71d3a6d6e368ec3a642e2041c92038699e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"180a5536bc5069865e3e707c3936c71d3a6d6e368ec3a642e2041c92038699e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/180a5536bc5069865e3e707c3936c71d3a6d6e368ec3a642e2041c92038699e2"}
{"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed"}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed"}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba7ac182515c9ee2445d2e2941bd3bc6a48f88cb2ad98ae64cdc0dcc7e9f6630","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba7ac182515c9ee2445d2e2941bd3bc6a48f88cb2ad98ae64cdc0dcc7e9f6630","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba7ac182515c9ee2445d2e2941bd3bc6a48f88cb2ad98ae64cdc0dcc7e9f6630","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba7ac182515c9ee2445d2e2941bd3bc6a48f88cb2ad98ae64cdc0dcc7e9f6630"}
{"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba7ac182515c9ee2445d2e2941bd3bc6a48f88cb2ad98ae64cdc0dcc7e9f6630","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba7ac182515c9ee2445d2e2941bd3bc6a48f88cb2ad98ae64cdc0dcc7e9f6630"}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba7ac182515c9ee2445d2e2941bd3bc6a48f88cb2ad98ae64cdc0dcc7e9f6630","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba7ac182515c9ee2445d2e2941bd3bc6a48f88cb2ad98ae64cdc0dcc7e9f6630"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba7ac182515c9ee2445d2e2941bd3bc6a48f88cb2ad98ae64cdc0dcc7e9f6630","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba7ac182515c9ee2445d2e2941bd3bc6a48f88cb2ad98ae64cdc0dcc7e9f6630","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed"}
{"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba7ac182515c9ee2445d2e2941bd3bc6a48f88cb2ad98ae64cdc0dcc7e9f6630"}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc64c86a37b7fe3eef4060749bb45fce5a82afd6ee479876f4d9ce65aa1255a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc64c86a37b7fe3eef4060749bb45fce5a82afd6ee479876f4d9ce65aa1255a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc64c86a37b7fe3eef4060749bb45fce5a82afd6ee479876f4d9ce65aa1255a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc64c86a37b7fe3eef4060749bb45fce5a82afd6ee479876f4d9ce65aa1255a3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc64c86a37b7fe3eef4060749bb45fce5a82afd6ee479876f4d9ce65aa1255a3"}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc64c86a37b7fe3eef4060749bb45fce5a82afd6ee479876f4d9ce65aa1255a3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc64c86a37b7fe3eef4060749bb45fce5a82afd6ee479876f4d9ce65aa1255a3"}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc64c86a37b7fe3eef4060749bb45fce5a82afd6ee479876f4d9ce65aa1255a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc64c86a37b7fe3eef4060749bb45fce5a82afd6ee479876f4d9ce65aa1255a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc64c86a37b7fe3eef4060749bb45fce5a82afd6ee479876f4d9ce65aa1255a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc64c86a37b7fe3eef4060749bb45fce5a82afd6ee479876f4d9ce65aa1255a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"894926be3f4a55d9cd73e51443ef2861e9852487e27866ab17f0af544475048c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"894926be3f4a55d9cd73e51443ef2861e9852487e27866ab17f0af544475048c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"894926be3f4a55d9cd73e51443ef2861e9852487e27866ab17f0af544475048c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"070453a6d21243e654a666529482b52474365cdb24c0572c57f63b7d9060b097","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc64c86a37b7fe3eef4060749bb45fce5a82afd6ee479876f4d9ce65aa1255a3"}
{"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"070453a6d21243e654a666529482b52474365cdb24c0572c57f63b7d9060b097","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"894926be3f4a55d9cd73e51443ef2861e9852487e27866ab17f0af544475048c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/894926be3f4a55d9cd73e51443ef2861e9852487e27866ab17f0af544475048c"}
{"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"894926be3f4a55d9cd73e51443ef2861e9852487e27866ab17f0af544475048c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"070453a6d21243e654a666529482b52474365cdb24c0572c57f63b7d9060b097","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"070453a6d21243e654a666529482b52474365cdb24c0572c57f63b7d9060b097","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"894926be3f4a55d9cd73e51443ef2861e9852487e27866ab17f0af544475048c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["894926be3f4a55d9cd73e51443ef2861e9852487e27866ab17f0af544475048c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/070453a6d21243e654a666529482b52474365cdb24c0572c57f63b7d9060b097"}
{"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"894926be3f4a55d9cd73e51443ef2861e9852487e27866ab17f0af544475048c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"070453a6d21243e654a666529482b52474365cdb24c0572c57f63b7d9060b097","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["070453a6d21243e654a666529482b52474365cdb24c0572c57f63b7d9060b097"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/894926be3f4a55d9cd73e51443ef2861e9852487e27866ab17f0af544475048c"}
{"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"070453a6d21243e654a666529482b52474365cdb24c0572c57f63b7d9060b097","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"894926be3f4a55d9cd73e51443ef2861e9852487e27866ab17f0af544475048c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"070453a6d21243e654a666529482b52474365cdb24c0572c57f63b7d9060b097","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"070453a6d21243e654a666529482b52474365cdb24c0572c57f63b7d9060b097","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad29dc10abd5dd1cb44737f5c6bb4efd3fe101e3ae750328d3f530b63a3e2272","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/070453a6d21243e654a666529482b52474365cdb24c0572c57f63b7d9060b097"}
{"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad29dc10abd5dd1cb44737f5c6bb4efd3fe101e3ae750328d3f530b63a3e2272","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"070453a6d21243e654a666529482b52474365cdb24c0572c57f63b7d9060b097","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["070453a6d21243e654a666529482b52474365cdb24c0572c57f63b7d9060b097"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"070453a6d21243e654a666529482b52474365cdb24c0572c57f63b7d9060b097","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad29dc10abd5dd1cb44737f5c6bb4efd3fe101e3ae750328d3f530b63a3e2272","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/894926be3f4a55d9cd73e51443ef2861e9852487e27866ab17f0af544475048c"}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"070453a6d21243e654a666529482b52474365cdb24c0572c57f63b7d9060b097","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad29dc10abd5dd1cb44737f5c6bb4efd3fe101e3ae750328d3f530b63a3e2272","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad29dc10abd5dd1cb44737f5c6bb4efd3fe101e3ae750328d3f530b63a3e2272"}
{"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad29dc10abd5dd1cb44737f5c6bb4efd3fe101e3ae750328d3f530b63a3e2272","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad29dc10abd5dd1cb44737f5c6bb4efd3fe101e3ae750328d3f530b63a3e2272","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad29dc10abd5dd1cb44737f5c6bb4efd3fe101e3ae750328d3f530b63a3e2272"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad29dc10abd5dd1cb44737f5c6bb4efd3fe101e3ae750328d3f530b63a3e2272","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad29dc10abd5dd1cb44737f5c6bb4efd3fe101e3ae750328d3f530b63a3e2272","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/070453a6d21243e654a666529482b52474365cdb24c0572c57f63b7d9060b097"}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad29dc10abd5dd1cb44737f5c6bb4efd3fe101e3ae750328d3f530b63a3e2272","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad29dc10abd5dd1cb44737f5c6bb4efd3fe101e3ae750328d3f530b63a3e2272","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad29dc10abd5dd1cb44737f5c6bb4efd3fe101e3ae750328d3f530b63a3e2272","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad29dc10abd5dd1cb44737f5c6bb4efd3fe101e3ae750328d3f530b63a3e2272","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad29dc10abd5dd1cb44737f5c6bb4efd3fe101e3ae750328d3f530b63a3e2272"}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad29dc10abd5dd1cb44737f5c6bb4efd3fe101e3ae750328d3f530b63a3e2272","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad29dc10abd5dd1cb44737f5c6bb4efd3fe101e3ae750328d3f530b63a3e2272"}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad29dc10abd5dd1cb44737f5c6bb4efd3fe101e3ae750328d3f530b63a3e2272","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad29dc10abd5dd1cb44737f5c6bb4efd3fe101e3ae750328d3f530b63a3e2272"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad29dc10abd5dd1cb44737f5c6bb4efd3fe101e3ae750328d3f530b63a3e2272","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad29dc10abd5dd1cb44737f5c6bb4efd3fe101e3ae750328d3f530b63a3e2272","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad29dc10abd5dd1cb44737f5c6bb4efd3fe101e3ae750328d3f530b63a3e2272","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad29dc10abd5dd1cb44737f5c6bb4efd3fe101e3ae750328d3f530b63a3e2272","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad29dc10abd5dd1cb44737f5c6bb4efd3fe101e3ae750328d3f530b63a3e2272","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad29dc10abd5dd1cb44737f5c6bb4efd3fe101e3ae750328d3f530b63a3e2272"}
{"level":"debug","ts":"2026-07-02T19:41:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad29dc10abd5dd1cb44737f5c6bb4efd3fe101e3ae750328d3f530b63a3e2272","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad29dc10abd5dd1cb44737f5c6bb4efd3fe101e3ae750328d3f530b63a3e2272"}
{"level":"debug","ts":"2026-07-02T19:41:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad29dc10abd5dd1cb44737f5c6bb4efd3fe101e3ae750328d3f530b63a3e2272","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad29dc10abd5dd1cb44737f5c6bb4efd3fe101e3ae750328d3f530b63a3e2272"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad29dc10abd5dd1cb44737f5c6bb4efd3fe101e3ae750328d3f530b63a3e2272","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad29dc10abd5dd1cb44737f5c6bb4efd3fe101e3ae750328d3f530b63a3e2272","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad29dc10abd5dd1cb44737f5c6bb4efd3fe101e3ae750328d3f530b63a3e2272"}
{"level":"debug","ts":"2026-07-02T19:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6607358ac73d864f4621b8274a9b7bf3221ff4a4de1d5c30b642f358ed1c8c00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6607358ac73d864f4621b8274a9b7bf3221ff4a4de1d5c30b642f358ed1c8c00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6607358ac73d864f4621b8274a9b7bf3221ff4a4de1d5c30b642f358ed1c8c00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6607358ac73d864f4621b8274a9b7bf3221ff4a4de1d5c30b642f358ed1c8c00","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6607358ac73d864f4621b8274a9b7bf3221ff4a4de1d5c30b642f358ed1c8c00"}
{"level":"debug","ts":"2026-07-02T19:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6607358ac73d864f4621b8274a9b7bf3221ff4a4de1d5c30b642f358ed1c8c00","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6607358ac73d864f4621b8274a9b7bf3221ff4a4de1d5c30b642f358ed1c8c00"}
{"level":"debug","ts":"2026-07-02T19:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6607358ac73d864f4621b8274a9b7bf3221ff4a4de1d5c30b642f358ed1c8c00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6607358ac73d864f4621b8274a9b7bf3221ff4a4de1d5c30b642f358ed1c8c00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6607358ac73d864f4621b8274a9b7bf3221ff4a4de1d5c30b642f358ed1c8c00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a1492035373c1194ed017f175174ad0a63fe2ac73467ef498e9c69b3962dc99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a1492035373c1194ed017f175174ad0a63fe2ac73467ef498e9c69b3962dc99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6607358ac73d864f4621b8274a9b7bf3221ff4a4de1d5c30b642f358ed1c8c00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86d4818950e075365e3575e6e3bd6ddb6986e0c0b318d96e7c1ab0c7bb366cdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a1492035373c1194ed017f175174ad0a63fe2ac73467ef498e9c69b3962dc99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a1492035373c1194ed017f175174ad0a63fe2ac73467ef498e9c69b3962dc99","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a1492035373c1194ed017f175174ad0a63fe2ac73467ef498e9c69b3962dc99"}
{"level":"debug","ts":"2026-07-02T19:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a1492035373c1194ed017f175174ad0a63fe2ac73467ef498e9c69b3962dc99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a1492035373c1194ed017f175174ad0a63fe2ac73467ef498e9c69b3962dc99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6607358ac73d864f4621b8274a9b7bf3221ff4a4de1d5c30b642f358ed1c8c00"}
{"level":"info","ts":"2026-07-02T19:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a1492035373c1194ed017f175174ad0a63fe2ac73467ef498e9c69b3962dc99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a1492035373c1194ed017f175174ad0a63fe2ac73467ef498e9c69b3962dc99","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86d4818950e075365e3575e6e3bd6ddb6986e0c0b318d96e7c1ab0c7bb366cdf"}
{"level":"info","ts":"2026-07-02T19:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a1492035373c1194ed017f175174ad0a63fe2ac73467ef498e9c69b3962dc99"}
{"level":"debug","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773"}
{"level":"info","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773"}
{"level":"info","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773"}
{"level":"info","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773"}
{"level":"info","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad29dc10abd5dd1cb44737f5c6bb4efd3fe101e3ae750328d3f530b63a3e2272","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad29dc10abd5dd1cb44737f5c6bb4efd3fe101e3ae750328d3f530b63a3e2272"}
{"level":"info","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad29dc10abd5dd1cb44737f5c6bb4efd3fe101e3ae750328d3f530b63a3e2272","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad29dc10abd5dd1cb44737f5c6bb4efd3fe101e3ae750328d3f530b63a3e2272","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad29dc10abd5dd1cb44737f5c6bb4efd3fe101e3ae750328d3f530b63a3e2272"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad29dc10abd5dd1cb44737f5c6bb4efd3fe101e3ae750328d3f530b63a3e2272","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"818eca6818843a438f4563e2743829884bd75ef6eaacaf3262ff61bf537ba5d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad29dc10abd5dd1cb44737f5c6bb4efd3fe101e3ae750328d3f530b63a3e2272","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773"}
{"level":"debug","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad29dc10abd5dd1cb44737f5c6bb4efd3fe101e3ae750328d3f530b63a3e2272"}
{"level":"info","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/818eca6818843a438f4563e2743829884bd75ef6eaacaf3262ff61bf537ba5d7"}
{"level":"info","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773"}
{"level":"debug","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc64c86a37b7fe3eef4060749bb45fce5a82afd6ee479876f4d9ce65aa1255a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc64c86a37b7fe3eef4060749bb45fce5a82afd6ee479876f4d9ce65aa1255a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc64c86a37b7fe3eef4060749bb45fce5a82afd6ee479876f4d9ce65aa1255a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc64c86a37b7fe3eef4060749bb45fce5a82afd6ee479876f4d9ce65aa1255a3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc64c86a37b7fe3eef4060749bb45fce5a82afd6ee479876f4d9ce65aa1255a3"}
{"level":"debug","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc64c86a37b7fe3eef4060749bb45fce5a82afd6ee479876f4d9ce65aa1255a3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc64c86a37b7fe3eef4060749bb45fce5a82afd6ee479876f4d9ce65aa1255a3"}
{"level":"debug","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc64c86a37b7fe3eef4060749bb45fce5a82afd6ee479876f4d9ce65aa1255a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc64c86a37b7fe3eef4060749bb45fce5a82afd6ee479876f4d9ce65aa1255a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc64c86a37b7fe3eef4060749bb45fce5a82afd6ee479876f4d9ce65aa1255a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc64c86a37b7fe3eef4060749bb45fce5a82afd6ee479876f4d9ce65aa1255a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc64c86a37b7fe3eef4060749bb45fce5a82afd6ee479876f4d9ce65aa1255a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36d4eb9f301acac3ee0ba6f72b010b9949953e03d5370277d3f1a18fefb726e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc64c86a37b7fe3eef4060749bb45fce5a82afd6ee479876f4d9ce65aa1255a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc64c86a37b7fe3eef4060749bb45fce5a82afd6ee479876f4d9ce65aa1255a3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc64c86a37b7fe3eef4060749bb45fce5a82afd6ee479876f4d9ce65aa1255a3"}
{"level":"debug","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc64c86a37b7fe3eef4060749bb45fce5a82afd6ee479876f4d9ce65aa1255a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc64c86a37b7fe3eef4060749bb45fce5a82afd6ee479876f4d9ce65aa1255a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36d4eb9f301acac3ee0ba6f72b010b9949953e03d5370277d3f1a18fefb726e4"}
{"level":"info","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc64c86a37b7fe3eef4060749bb45fce5a82afd6ee479876f4d9ce65aa1255a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc64c86a37b7fe3eef4060749bb45fce5a82afd6ee479876f4d9ce65aa1255a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc64c86a37b7fe3eef4060749bb45fce5a82afd6ee479876f4d9ce65aa1255a3"}
{"level":"info","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc64c86a37b7fe3eef4060749bb45fce5a82afd6ee479876f4d9ce65aa1255a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc64c86a37b7fe3eef4060749bb45fce5a82afd6ee479876f4d9ce65aa1255a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc64c86a37b7fe3eef4060749bb45fce5a82afd6ee479876f4d9ce65aa1255a3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc64c86a37b7fe3eef4060749bb45fce5a82afd6ee479876f4d9ce65aa1255a3"}
{"level":"debug","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc64c86a37b7fe3eef4060749bb45fce5a82afd6ee479876f4d9ce65aa1255a3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc64c86a37b7fe3eef4060749bb45fce5a82afd6ee479876f4d9ce65aa1255a3"}
{"level":"debug","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d07741af706c0487a2c0da30992dde42499941a401459bf315cee6ff29fc6e3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d07741af706c0487a2c0da30992dde42499941a401459bf315cee6ff29fc6e3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d07741af706c0487a2c0da30992dde42499941a401459bf315cee6ff29fc6e3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d07741af706c0487a2c0da30992dde42499941a401459bf315cee6ff29fc6e3c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d07741af706c0487a2c0da30992dde42499941a401459bf315cee6ff29fc6e3c"}
{"level":"debug","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc64c86a37b7fe3eef4060749bb45fce5a82afd6ee479876f4d9ce65aa1255a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc64c86a37b7fe3eef4060749bb45fce5a82afd6ee479876f4d9ce65aa1255a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc64c86a37b7fe3eef4060749bb45fce5a82afd6ee479876f4d9ce65aa1255a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc64c86a37b7fe3eef4060749bb45fce5a82afd6ee479876f4d9ce65aa1255a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d07741af706c0487a2c0da30992dde42499941a401459bf315cee6ff29fc6e3c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d07741af706c0487a2c0da30992dde42499941a401459bf315cee6ff29fc6e3c"}
{"level":"info","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc64c86a37b7fe3eef4060749bb45fce5a82afd6ee479876f4d9ce65aa1255a3"}
{"level":"debug","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d07741af706c0487a2c0da30992dde42499941a401459bf315cee6ff29fc6e3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d07741af706c0487a2c0da30992dde42499941a401459bf315cee6ff29fc6e3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d07741af706c0487a2c0da30992dde42499941a401459bf315cee6ff29fc6e3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba7ac182515c9ee2445d2e2941bd3bc6a48f88cb2ad98ae64cdc0dcc7e9f6630","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba7ac182515c9ee2445d2e2941bd3bc6a48f88cb2ad98ae64cdc0dcc7e9f6630","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d07741af706c0487a2c0da30992dde42499941a401459bf315cee6ff29fc6e3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba7ac182515c9ee2445d2e2941bd3bc6a48f88cb2ad98ae64cdc0dcc7e9f6630","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba7ac182515c9ee2445d2e2941bd3bc6a48f88cb2ad98ae64cdc0dcc7e9f6630"}
{"level":"debug","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba7ac182515c9ee2445d2e2941bd3bc6a48f88cb2ad98ae64cdc0dcc7e9f6630","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba7ac182515c9ee2445d2e2941bd3bc6a48f88cb2ad98ae64cdc0dcc7e9f6630"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba7ac182515c9ee2445d2e2941bd3bc6a48f88cb2ad98ae64cdc0dcc7e9f6630","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba7ac182515c9ee2445d2e2941bd3bc6a48f88cb2ad98ae64cdc0dcc7e9f6630","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d07741af706c0487a2c0da30992dde42499941a401459bf315cee6ff29fc6e3c"}
{"level":"info","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba7ac182515c9ee2445d2e2941bd3bc6a48f88cb2ad98ae64cdc0dcc7e9f6630"}
{"level":"debug","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e14b87ab2091f0f46234cff748c5598c261ceef289bc6421a004f1b0c6176006","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"894926be3f4a55d9cd73e51443ef2861e9852487e27866ab17f0af544475048c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e14b87ab2091f0f46234cff748c5598c261ceef289bc6421a004f1b0c6176006"}
{"level":"debug","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c55eb8f29fa63e4dd41e6d3e3b742e860db2b172672c06ec001b4bfe6d532e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/894926be3f4a55d9cd73e51443ef2861e9852487e27866ab17f0af544475048c"}
{"level":"info","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c55eb8f29fa63e4dd41e6d3e3b742e860db2b172672c06ec001b4bfe6d532e2"}
{"level":"debug","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32"}
{"level":"debug","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32"}
{"level":"debug","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7681b628cd7cd9675a0a3486834654bc2854ddbfa028d3d5d459056b0d2411ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c557622291a6f60d739df5301771e2f4b41fdd188c8312c81c6476a9c4ef1d09","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32"}
{"level":"debug","ts":"2026-07-02T19:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"180a5536bc5069865e3e707c3936c71d3a6d6e368ec3a642e2041c92038699e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7681b628cd7cd9675a0a3486834654bc2854ddbfa028d3d5d459056b0d2411ba"}
{"level":"info","ts":"2026-07-02T19:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c557622291a6f60d739df5301771e2f4b41fdd188c8312c81c6476a9c4ef1d09"}
{"level":"info","ts":"2026-07-02T19:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/180a5536bc5069865e3e707c3936c71d3a6d6e368ec3a642e2041c92038699e2"}
{"level":"debug","ts":"2026-07-02T19:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6670e9cd032934180e4c4a39c982a69ecceb87666be868c6612b974798c90b18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed"}
{"level":"debug","ts":"2026-07-02T19:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"070453a6d21243e654a666529482b52474365cdb24c0572c57f63b7d9060b097","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6670e9cd032934180e4c4a39c982a69ecceb87666be868c6612b974798c90b18"}
{"level":"info","ts":"2026-07-02T19:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed"}
{"level":"info","ts":"2026-07-02T19:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/070453a6d21243e654a666529482b52474365cdb24c0572c57f63b7d9060b097"}
{"level":"info","ts":"2026-07-02T19:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed"}
{"level":"error","ts":"2026-07-02T19:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T19:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed"}
{"level":"debug","ts":"2026-07-02T19:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:41:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:41:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed"}
{"level":"debug","ts":"2026-07-02T19:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed"}
{"level":"debug","ts":"2026-07-02T19:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:41:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:41:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed"}
{"level":"info","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"90effc75-7973-4d9d-8795-8e657b55aa7f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:45970","PortSpecifier":{"PortValue":45970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"90effc75-7973-4d9d-8795-8e657b55aa7f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"90effc75-7973-4d9d-8795-8e657b55aa7f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:45970","PortSpecifier":{"PortValue":45970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021301,"nanos":22638793},"http":{"id":"90effc75-7973-4d9d-8795-8e657b55aa7f","method":"POST","headers":{":authority":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"90effc75-7973-4d9d-8795-8e657b55aa7f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"90effc75-7973-4d9d-8795-8e657b55aa7f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"]}}
{"level":"debug","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"90effc75-7973-4d9d-8795-8e657b55aa7f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90effc75-7973-4d9d-8795-8e657b55aa7f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90effc75-7973-4d9d-8795-8e657b55aa7f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90effc75-7973-4d9d-8795-8e657b55aa7f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-74b95c/sub-test-model-74b95c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"90effc75-7973-4d9d-8795-8e657b55aa7f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90effc75-7973-4d9d-8795-8e657b55aa7f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90effc75-7973-4d9d-8795-8e657b55aa7f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"90effc75-7973-4d9d-8795-8e657b55aa7f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"90effc75-7973-4d9d-8795-8e657b55aa7f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1c4cd9ab-dc6f-4886-9745-cd5848fa9310","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:55508","PortSpecifier":{"PortValue":55508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1c4cd9ab-dc6f-4886-9745-cd5848fa9310","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1c4cd9ab-dc6f-4886-9745-cd5848fa9310","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:55508","PortSpecifier":{"PortValue":55508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021301,"nanos":61469256},"http":{"id":"1c4cd9ab-dc6f-4886-9745-cd5848fa9310","method":"POST","headers":{":authority":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1c4cd9ab-dc6f-4886-9745-cd5848fa9310","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1c4cd9ab-dc6f-4886-9745-cd5848fa9310","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"]}}
{"level":"debug","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1c4cd9ab-dc6f-4886-9745-cd5848fa9310","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c557622291a6f60d739df5301771e2f4b41fdd188c8312c81c6476a9c4ef1d09"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c4cd9ab-dc6f-4886-9745-cd5848fa9310","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c4cd9ab-dc6f-4886-9745-cd5848fa9310","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c4cd9ab-dc6f-4886-9745-cd5848fa9310","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8e566a/sub-test-model-8e566a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1c4cd9ab-dc6f-4886-9745-cd5848fa9310","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c4cd9ab-dc6f-4886-9745-cd5848fa9310","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c4cd9ab-dc6f-4886-9745-cd5848fa9310","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1c4cd9ab-dc6f-4886-9745-cd5848fa9310","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1c4cd9ab-dc6f-4886-9745-cd5848fa9310","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66f53fba-d646-42f4-b0f5-ad4cc00cbacd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:45972","PortSpecifier":{"PortValue":45972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"66f53fba-d646-42f4-b0f5-ad4cc00cbacd","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66f53fba-d646-42f4-b0f5-ad4cc00cbacd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:45972","PortSpecifier":{"PortValue":45972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021301,"nanos":101027503},"http":{"id":"66f53fba-d646-42f4-b0f5-ad4cc00cbacd","method":"GET","headers":{":authority":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"66f53fba-d646-42f4-b0f5-ad4cc00cbacd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1QFuQpEMPdDNQMmyg_ENNvJMAvYDHfRsg9XjQDnaeLjPmETkI1EROnys5fbWO"}
{"level":"debug","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"66f53fba-d646-42f4-b0f5-ad4cc00cbacd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1QFuQpEMPdDNQMmyg_ENNvJMAvYDHfRsg9XjQDnaeLjPmETkI1EROnys5fbWO\"}"}
{"level":"debug","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"66f53fba-d646-42f4-b0f5-ad4cc00cbacd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0dfe6047-6202-4e81-ac54-31defdeae1e8","keyName":"e2e-sub-iso-7aa24e","subscription":"e2e-a-only-c445bd","tenant":"e2e-shared-a-74b95c","userId":"0dfe6047-6202-4e81-ac54-31defdeae1e8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"66f53fba-d646-42f4-b0f5-ad4cc00cbacd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66f53fba-d646-42f4-b0f5-ad4cc00cbacd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66f53fba-d646-42f4-b0f5-ad4cc00cbacd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66f53fba-d646-42f4-b0f5-ad4cc00cbacd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-74b95c/sub-test-model-74b95c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"66f53fba-d646-42f4-b0f5-ad4cc00cbacd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66f53fba-d646-42f4-b0f5-ad4cc00cbacd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-c445bd"}
{"level":"debug","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66f53fba-d646-42f4-b0f5-ad4cc00cbacd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66f53fba-d646-42f4-b0f5-ad4cc00cbacd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66f53fba-d646-42f4-b0f5-ad4cc00cbacd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66f53fba-d646-42f4-b0f5-ad4cc00cbacd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f753778e-419a-4ea5-b3a6-a1bcf18f5bcb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:55516","PortSpecifier":{"PortValue":55516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f753778e-419a-4ea5-b3a6-a1bcf18f5bcb","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f753778e-419a-4ea5-b3a6-a1bcf18f5bcb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:55516","PortSpecifier":{"PortValue":55516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021301,"nanos":131366195},"http":{"id":"f753778e-419a-4ea5-b3a6-a1bcf18f5bcb","method":"GET","headers":{":authority":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f753778e-419a-4ea5-b3a6-a1bcf18f5bcb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-bDdUkMDbeVMHfRmD_ieYcAvoG8yHh0UI3X0kB4Rrgmu0QQh5TMOcx2r2d2fF"}
{"level":"debug","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f753778e-419a-4ea5-b3a6-a1bcf18f5bcb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-8e566a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-bDdUkMDbeVMHfRmD_ieYcAvoG8yHh0UI3X0kB4Rrgmu0QQh5TMOcx2r2d2fF\"}"}
{"level":"debug","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f753778e-419a-4ea5-b3a6-a1bcf18f5bcb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-8e566a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c5a3c3ea-4c95-4f12-8946-d7c03317e76b","keyName":"e2e-sub-iso-7e75db","subscription":"e2e-b-only-c445bd","tenant":"e2e-shared-b-8e566a","userId":"c5a3c3ea-4c95-4f12-8946-d7c03317e76b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f753778e-419a-4ea5-b3a6-a1bcf18f5bcb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f753778e-419a-4ea5-b3a6-a1bcf18f5bcb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f753778e-419a-4ea5-b3a6-a1bcf18f5bcb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f753778e-419a-4ea5-b3a6-a1bcf18f5bcb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8e566a/sub-test-model-8e566a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f753778e-419a-4ea5-b3a6-a1bcf18f5bcb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f753778e-419a-4ea5-b3a6-a1bcf18f5bcb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f753778e-419a-4ea5-b3a6-a1bcf18f5bcb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-c445bd"}
{"level":"debug","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f753778e-419a-4ea5-b3a6-a1bcf18f5bcb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f753778e-419a-4ea5-b3a6-a1bcf18f5bcb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:41:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f753778e-419a-4ea5-b3a6-a1bcf18f5bcb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c7382cb-19ce-4eff-aecd-5ff7b5e7bd60","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:39054","PortSpecifier":{"PortValue":39054}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0c7382cb-19ce-4eff-aecd-5ff7b5e7bd60","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c7382cb-19ce-4eff-aecd-5ff7b5e7bd60","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:39054","PortSpecifier":{"PortValue":39054}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021311,"nanos":86686554},"http":{"id":"0c7382cb-19ce-4eff-aecd-5ff7b5e7bd60","method":"POST","headers":{":authority":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0c7382cb-19ce-4eff-aecd-5ff7b5e7bd60","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0c7382cb-19ce-4eff-aecd-5ff7b5e7bd60","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"]}}
{"level":"debug","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0c7382cb-19ce-4eff-aecd-5ff7b5e7bd60","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c7382cb-19ce-4eff-aecd-5ff7b5e7bd60","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c7382cb-19ce-4eff-aecd-5ff7b5e7bd60","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c7382cb-19ce-4eff-aecd-5ff7b5e7bd60","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-74b95c/sub-test-model-74b95c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0c7382cb-19ce-4eff-aecd-5ff7b5e7bd60","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c7382cb-19ce-4eff-aecd-5ff7b5e7bd60","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c7382cb-19ce-4eff-aecd-5ff7b5e7bd60","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c7382cb-19ce-4eff-aecd-5ff7b5e7bd60","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c7382cb-19ce-4eff-aecd-5ff7b5e7bd60","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5347deeb-74a6-4e97-8383-c97cce56b829","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:36514","PortSpecifier":{"PortValue":36514}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5347deeb-74a6-4e97-8383-c97cce56b829","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5347deeb-74a6-4e97-8383-c97cce56b829","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:36514","PortSpecifier":{"PortValue":36514}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021311,"nanos":122739253},"http":{"id":"5347deeb-74a6-4e97-8383-c97cce56b829","method":"POST","headers":{":authority":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5347deeb-74a6-4e97-8383-c97cce56b829","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5347deeb-74a6-4e97-8383-c97cce56b829","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"]}}
{"level":"debug","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5347deeb-74a6-4e97-8383-c97cce56b829","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c557622291a6f60d739df5301771e2f4b41fdd188c8312c81c6476a9c4ef1d09"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5347deeb-74a6-4e97-8383-c97cce56b829","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5347deeb-74a6-4e97-8383-c97cce56b829","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5347deeb-74a6-4e97-8383-c97cce56b829","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8e566a/sub-test-model-8e566a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5347deeb-74a6-4e97-8383-c97cce56b829","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5347deeb-74a6-4e97-8383-c97cce56b829","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5347deeb-74a6-4e97-8383-c97cce56b829","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5347deeb-74a6-4e97-8383-c97cce56b829","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5347deeb-74a6-4e97-8383-c97cce56b829","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a8af6f3-56d9-4e40-851a-e0301bad693e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:39062","PortSpecifier":{"PortValue":39062}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1a8af6f3-56d9-4e40-851a-e0301bad693e","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a8af6f3-56d9-4e40-851a-e0301bad693e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:39062","PortSpecifier":{"PortValue":39062}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021311,"nanos":162014866},"http":{"id":"1a8af6f3-56d9-4e40-851a-e0301bad693e","method":"POST","headers":{":authority":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1a8af6f3-56d9-4e40-851a-e0301bad693e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-s4excWzCCHIYgHTX_V6UY7dHlf55UkyqZGbiCkHTWBc0NlUD8mvDhgb25KVK"}
{"level":"debug","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1a8af6f3-56d9-4e40-851a-e0301bad693e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-s4excWzCCHIYgHTX_V6UY7dHlf55UkyqZGbiCkHTWBc0NlUD8mvDhgb25KVK\"}"}
{"level":"debug","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1a8af6f3-56d9-4e40-851a-e0301bad693e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"acf56f90-8ee7-4072-ac43-f6b25b1ee1fd","keyName":"e2e-sub-iso-d97c95","subscription":"e2e-shared-sub-6ecce7","tenant":"e2e-shared-a-74b95c","userId":"acf56f90-8ee7-4072-ac43-f6b25b1ee1fd","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1a8af6f3-56d9-4e40-851a-e0301bad693e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a8af6f3-56d9-4e40-851a-e0301bad693e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a8af6f3-56d9-4e40-851a-e0301bad693e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a8af6f3-56d9-4e40-851a-e0301bad693e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-74b95c/sub-test-model-74b95c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a8af6f3-56d9-4e40-851a-e0301bad693e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1a8af6f3-56d9-4e40-851a-e0301bad693e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a8af6f3-56d9-4e40-851a-e0301bad693e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-6ecce7"}
{"level":"debug","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a8af6f3-56d9-4e40-851a-e0301bad693e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a8af6f3-56d9-4e40-851a-e0301bad693e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a8af6f3-56d9-4e40-851a-e0301bad693e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8de5df6e-21e6-404d-a704-df49aaa8ff28","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:36516","PortSpecifier":{"PortValue":36516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8de5df6e-21e6-404d-a704-df49aaa8ff28","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8de5df6e-21e6-404d-a704-df49aaa8ff28","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:36516","PortSpecifier":{"PortValue":36516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021311,"nanos":198510927},"http":{"id":"8de5df6e-21e6-404d-a704-df49aaa8ff28","method":"POST","headers":{":authority":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8de5df6e-21e6-404d-a704-df49aaa8ff28","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MTtPE1WicgbItx8a_8YAWiycfrHJOPVTFYTYMJkvp8gd9BncwR35gIEbCRGY"}
{"level":"debug","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8de5df6e-21e6-404d-a704-df49aaa8ff28","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-8e566a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MTtPE1WicgbItx8a_8YAWiycfrHJOPVTFYTYMJkvp8gd9BncwR35gIEbCRGY\"}"}
{"level":"debug","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8de5df6e-21e6-404d-a704-df49aaa8ff28","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-8e566a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0da0fe18-98e0-43ce-9a7e-4159368ac9a9","keyName":"e2e-sub-iso-f81c9c","subscription":"e2e-shared-sub-6ecce7","tenant":"e2e-shared-b-8e566a","userId":"0da0fe18-98e0-43ce-9a7e-4159368ac9a9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8de5df6e-21e6-404d-a704-df49aaa8ff28","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8de5df6e-21e6-404d-a704-df49aaa8ff28","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8de5df6e-21e6-404d-a704-df49aaa8ff28","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8de5df6e-21e6-404d-a704-df49aaa8ff28","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8e566a/sub-test-model-8e566a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8de5df6e-21e6-404d-a704-df49aaa8ff28","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8de5df6e-21e6-404d-a704-df49aaa8ff28","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-6ecce7"}
{"level":"debug","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8de5df6e-21e6-404d-a704-df49aaa8ff28","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8de5df6e-21e6-404d-a704-df49aaa8ff28","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8de5df6e-21e6-404d-a704-df49aaa8ff28","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:41:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8de5df6e-21e6-404d-a704-df49aaa8ff28","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/36d4eb9f301acac3ee0ba6f72b010b9949953e03d5370277d3f1a18fefb726e4"}
{"level":"info","ts":"2026-07-02T19:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/180a5536bc5069865e3e707c3936c71d3a6d6e368ec3a642e2041c92038699e2"}
{"level":"info","ts":"2026-07-02T19:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/94a8bff9fea04cd98bf1bde6ed42026eeb9bb54d4072bbe2f4e5e0d39b6d3fed"}
{"level":"info","ts":"2026-07-02T19:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc64c86a37b7fe3eef4060749bb45fce5a82afd6ee479876f4d9ce65aa1255a3"}
{"level":"info","ts":"2026-07-02T19:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7681b628cd7cd9675a0a3486834654bc2854ddbfa028d3d5d459056b0d2411ba"}
{"level":"info","ts":"2026-07-02T19:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/070453a6d21243e654a666529482b52474365cdb24c0572c57f63b7d9060b097"}
{"level":"info","ts":"2026-07-02T19:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e14b87ab2091f0f46234cff748c5598c261ceef289bc6421a004f1b0c6176006"}
{"level":"info","ts":"2026-07-02T19:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6670e9cd032934180e4c4a39c982a69ecceb87666be868c6612b974798c90b18"}
{"level":"info","ts":"2026-07-02T19:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6607358ac73d864f4621b8274a9b7bf3221ff4a4de1d5c30b642f358ed1c8c00"}
{"level":"info","ts":"2026-07-02T19:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/86d4818950e075365e3575e6e3bd6ddb6986e0c0b318d96e7c1ab0c7bb366cdf"}
{"level":"info","ts":"2026-07-02T19:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c55eb8f29fa63e4dd41e6d3e3b742e860db2b172672c06ec001b4bfe6d532e2"}
{"level":"info","ts":"2026-07-02T19:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba7ac182515c9ee2445d2e2941bd3bc6a48f88cb2ad98ae64cdc0dcc7e9f6630"}
{"level":"info","ts":"2026-07-02T19:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/818eca6818843a438f4563e2743829884bd75ef6eaacaf3262ff61bf537ba5d7"}
{"level":"info","ts":"2026-07-02T19:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad29dc10abd5dd1cb44737f5c6bb4efd3fe101e3ae750328d3f530b63a3e2272"}
{"level":"info","ts":"2026-07-02T19:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/894926be3f4a55d9cd73e51443ef2861e9852487e27866ab17f0af544475048c"}
{"level":"info","ts":"2026-07-02T19:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f8094dcf753a50061dd7ae2361cf6a5d2d7169db6fdf37f67bc587ee0899b773"}
{"level":"debug","ts":"2026-07-02T19:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6168701e1b0602b5427307b31a589c1df2dac63153ca5a3dba0a468a78e99de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:42:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:42:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6168701e1b0602b5427307b31a589c1df2dac63153ca5a3dba0a468a78e99de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6168701e1b0602b5427307b31a589c1df2dac63153ca5a3dba0a468a78e99de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6168701e1b0602b5427307b31a589c1df2dac63153ca5a3dba0a468a78e99de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6168701e1b0602b5427307b31a589c1df2dac63153ca5a3dba0a468a78e99de"}
{"level":"debug","ts":"2026-07-02T19:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6168701e1b0602b5427307b31a589c1df2dac63153ca5a3dba0a468a78e99de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6168701e1b0602b5427307b31a589c1df2dac63153ca5a3dba0a468a78e99de"}
{"level":"debug","ts":"2026-07-02T19:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6168701e1b0602b5427307b31a589c1df2dac63153ca5a3dba0a468a78e99de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:42:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:42:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6168701e1b0602b5427307b31a589c1df2dac63153ca5a3dba0a468a78e99de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6168701e1b0602b5427307b31a589c1df2dac63153ca5a3dba0a468a78e99de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a8ee81517365a92d4fc0523a8f86a765667b18b7272d4a857c51f5b6b81764c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:42:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:42:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a8ee81517365a92d4fc0523a8f86a765667b18b7272d4a857c51f5b6b81764c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6168701e1b0602b5427307b31a589c1df2dac63153ca5a3dba0a468a78e99de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a8ee81517365a92d4fc0523a8f86a765667b18b7272d4a857c51f5b6b81764c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a8ee81517365a92d4fc0523a8f86a765667b18b7272d4a857c51f5b6b81764c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a8ee81517365a92d4fc0523a8f86a765667b18b7272d4a857c51f5b6b81764c"}
{"level":"debug","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a8ee81517365a92d4fc0523a8f86a765667b18b7272d4a857c51f5b6b81764c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:42:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:42:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a8ee81517365a92d4fc0523a8f86a765667b18b7272d4a857c51f5b6b81764c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a8ee81517365a92d4fc0523a8f86a765667b18b7272d4a857c51f5b6b81764c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a8ee81517365a92d4fc0523a8f86a765667b18b7272d4a857c51f5b6b81764c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6168701e1b0602b5427307b31a589c1df2dac63153ca5a3dba0a468a78e99de"}
{"level":"debug","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e85a47a1ca462ce8633acdfa8f2d9f8620a635efea8b88209c123b8f38157913","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:42:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:42:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e85a47a1ca462ce8633acdfa8f2d9f8620a635efea8b88209c123b8f38157913","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a8ee81517365a92d4fc0523a8f86a765667b18b7272d4a857c51f5b6b81764c"}
{"level":"debug","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e85a47a1ca462ce8633acdfa8f2d9f8620a635efea8b88209c123b8f38157913","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e85a47a1ca462ce8633acdfa8f2d9f8620a635efea8b88209c123b8f38157913","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:42:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:42:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e85a47a1ca462ce8633acdfa8f2d9f8620a635efea8b88209c123b8f38157913","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e85a47a1ca462ce8633acdfa8f2d9f8620a635efea8b88209c123b8f38157913","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e85a47a1ca462ce8633acdfa8f2d9f8620a635efea8b88209c123b8f38157913"}
{"level":"debug","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e85a47a1ca462ce8633acdfa8f2d9f8620a635efea8b88209c123b8f38157913","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e85a47a1ca462ce8633acdfa8f2d9f8620a635efea8b88209c123b8f38157913"}
{"level":"debug","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a8a54288e54f71905d29f9ec90a254a7f5d04449513208b4ee79ce4c707492e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:42:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:42:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a8a54288e54f71905d29f9ec90a254a7f5d04449513208b4ee79ce4c707492e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a8a54288e54f71905d29f9ec90a254a7f5d04449513208b4ee79ce4c707492e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a8a54288e54f71905d29f9ec90a254a7f5d04449513208b4ee79ce4c707492e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a8a54288e54f71905d29f9ec90a254a7f5d04449513208b4ee79ce4c707492e"}
{"level":"debug","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e85a47a1ca462ce8633acdfa8f2d9f8620a635efea8b88209c123b8f38157913","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:42:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:42:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e85a47a1ca462ce8633acdfa8f2d9f8620a635efea8b88209c123b8f38157913"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a8a54288e54f71905d29f9ec90a254a7f5d04449513208b4ee79ce4c707492e"}
{"level":"info","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e85a47a1ca462ce8633acdfa8f2d9f8620a635efea8b88209c123b8f38157913","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a8a54288e54f71905d29f9ec90a254a7f5d04449513208b4ee79ce4c707492e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:42:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:42:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a8a54288e54f71905d29f9ec90a254a7f5d04449513208b4ee79ce4c707492e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a8a54288e54f71905d29f9ec90a254a7f5d04449513208b4ee79ce4c707492e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e85a47a1ca462ce8633acdfa8f2d9f8620a635efea8b88209c123b8f38157913","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:42:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:42:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e85a47a1ca462ce8633acdfa8f2d9f8620a635efea8b88209c123b8f38157913"}
{"level":"info","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e85a47a1ca462ce8633acdfa8f2d9f8620a635efea8b88209c123b8f38157913","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a8a54288e54f71905d29f9ec90a254a7f5d04449513208b4ee79ce4c707492e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:42:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:42:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a8a54288e54f71905d29f9ec90a254a7f5d04449513208b4ee79ce4c707492e"}
{"level":"info","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a8a54288e54f71905d29f9ec90a254a7f5d04449513208b4ee79ce4c707492e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e85a47a1ca462ce8633acdfa8f2d9f8620a635efea8b88209c123b8f38157913","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"874aa2e5cd9d0df9909f8df1b2ceb5cc34ce1817dcffda3b4535a1b8ceb90c2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:42:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:42:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"874aa2e5cd9d0df9909f8df1b2ceb5cc34ce1817dcffda3b4535a1b8ceb90c2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a8a54288e54f71905d29f9ec90a254a7f5d04449513208b4ee79ce4c707492e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:42:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:42:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a8a54288e54f71905d29f9ec90a254a7f5d04449513208b4ee79ce4c707492e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e85a47a1ca462ce8633acdfa8f2d9f8620a635efea8b88209c123b8f38157913"}
{"level":"info","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a8a54288e54f71905d29f9ec90a254a7f5d04449513208b4ee79ce4c707492e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08bef13984dd5b2db77599cf13808bbe0d45fd639e73de0f7e44ab6a87ccfc61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:42:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:42:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/874aa2e5cd9d0df9909f8df1b2ceb5cc34ce1817dcffda3b4535a1b8ceb90c2a"}
{"level":"info","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08bef13984dd5b2db77599cf13808bbe0d45fd639e73de0f7e44ab6a87ccfc61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e85a47a1ca462ce8633acdfa8f2d9f8620a635efea8b88209c123b8f38157913","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:42:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:42:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e85a47a1ca462ce8633acdfa8f2d9f8620a635efea8b88209c123b8f38157913"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e85a47a1ca462ce8633acdfa8f2d9f8620a635efea8b88209c123b8f38157913","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"874aa2e5cd9d0df9909f8df1b2ceb5cc34ce1817dcffda3b4535a1b8ceb90c2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:42:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:42:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["874aa2e5cd9d0df9909f8df1b2ceb5cc34ce1817dcffda3b4535a1b8ceb90c2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a8a54288e54f71905d29f9ec90a254a7f5d04449513208b4ee79ce4c707492e"}
{"level":"info","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"874aa2e5cd9d0df9909f8df1b2ceb5cc34ce1817dcffda3b4535a1b8ceb90c2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a8a54288e54f71905d29f9ec90a254a7f5d04449513208b4ee79ce4c707492e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08bef13984dd5b2db77599cf13808bbe0d45fd639e73de0f7e44ab6a87ccfc61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:42:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:42:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08bef13984dd5b2db77599cf13808bbe0d45fd639e73de0f7e44ab6a87ccfc61"}
{"level":"info","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08bef13984dd5b2db77599cf13808bbe0d45fd639e73de0f7e44ab6a87ccfc61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e85a47a1ca462ce8633acdfa8f2d9f8620a635efea8b88209c123b8f38157913","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:42:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:42:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e85a47a1ca462ce8633acdfa8f2d9f8620a635efea8b88209c123b8f38157913","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"874aa2e5cd9d0df9909f8df1b2ceb5cc34ce1817dcffda3b4535a1b8ceb90c2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08bef13984dd5b2db77599cf13808bbe0d45fd639e73de0f7e44ab6a87ccfc61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:42:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:42:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08bef13984dd5b2db77599cf13808bbe0d45fd639e73de0f7e44ab6a87ccfc61"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e85a47a1ca462ce8633acdfa8f2d9f8620a635efea8b88209c123b8f38157913"}
{"level":"info","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08bef13984dd5b2db77599cf13808bbe0d45fd639e73de0f7e44ab6a87ccfc61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c8b16b10a881a22414be5649037dc20f792a1905e33c281a7cf5c05775df0af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:42:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:42:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/874aa2e5cd9d0df9909f8df1b2ceb5cc34ce1817dcffda3b4535a1b8ceb90c2a"}
{"level":"info","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c8b16b10a881a22414be5649037dc20f792a1905e33c281a7cf5c05775df0af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e85a47a1ca462ce8633acdfa8f2d9f8620a635efea8b88209c123b8f38157913","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:42:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:42:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e85a47a1ca462ce8633acdfa8f2d9f8620a635efea8b88209c123b8f38157913"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e85a47a1ca462ce8633acdfa8f2d9f8620a635efea8b88209c123b8f38157913","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b689bdee41c322d0da156dbb24fef606e16d1421d83bc4f303e342580383d921","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:42:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:42:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08bef13984dd5b2db77599cf13808bbe0d45fd639e73de0f7e44ab6a87ccfc61"}
{"level":"info","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b689bdee41c322d0da156dbb24fef606e16d1421d83bc4f303e342580383d921","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08bef13984dd5b2db77599cf13808bbe0d45fd639e73de0f7e44ab6a87ccfc61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c8b16b10a881a22414be5649037dc20f792a1905e33c281a7cf5c05775df0af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:42:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:42:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c8b16b10a881a22414be5649037dc20f792a1905e33c281a7cf5c05775df0af"}
{"level":"info","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c8b16b10a881a22414be5649037dc20f792a1905e33c281a7cf5c05775df0af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e85a47a1ca462ce8633acdfa8f2d9f8620a635efea8b88209c123b8f38157913","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b689bdee41c322d0da156dbb24fef606e16d1421d83bc4f303e342580383d921","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:42:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:42:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b689bdee41c322d0da156dbb24fef606e16d1421d83bc4f303e342580383d921","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c8b16b10a881a22414be5649037dc20f792a1905e33c281a7cf5c05775df0af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:42:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:42:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c8b16b10a881a22414be5649037dc20f792a1905e33c281a7cf5c05775df0af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b689bdee41c322d0da156dbb24fef606e16d1421d83bc4f303e342580383d921"}
{"level":"info","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c8b16b10a881a22414be5649037dc20f792a1905e33c281a7cf5c05775df0af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b689bdee41c322d0da156dbb24fef606e16d1421d83bc4f303e342580383d921","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:42:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:42:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b689bdee41c322d0da156dbb24fef606e16d1421d83bc4f303e342580383d921"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e85a47a1ca462ce8633acdfa8f2d9f8620a635efea8b88209c123b8f38157913"}
{"level":"info","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b689bdee41c322d0da156dbb24fef606e16d1421d83bc4f303e342580383d921","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c8b16b10a881a22414be5649037dc20f792a1905e33c281a7cf5c05775df0af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:42:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:42:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c8b16b10a881a22414be5649037dc20f792a1905e33c281a7cf5c05775df0af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b689bdee41c322d0da156dbb24fef606e16d1421d83bc4f303e342580383d921","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c8b16b10a881a22414be5649037dc20f792a1905e33c281a7cf5c05775df0af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c8b16b10a881a22414be5649037dc20f792a1905e33c281a7cf5c05775df0af"}
{"level":"debug","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c8b16b10a881a22414be5649037dc20f792a1905e33c281a7cf5c05775df0af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:42:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:42:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c8b16b10a881a22414be5649037dc20f792a1905e33c281a7cf5c05775df0af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c8b16b10a881a22414be5649037dc20f792a1905e33c281a7cf5c05775df0af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c8b16b10a881a22414be5649037dc20f792a1905e33c281a7cf5c05775df0af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b689bdee41c322d0da156dbb24fef606e16d1421d83bc4f303e342580383d921"}
{"level":"info","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c8b16b10a881a22414be5649037dc20f792a1905e33c281a7cf5c05775df0af"}
{"level":"debug","ts":"2026-07-02T19:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb3398038cc27de388f85b11fff082bda4939a8707690cb8fb1177ad94a06de2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb3398038cc27de388f85b11fff082bda4939a8707690cb8fb1177ad94a06de2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb3398038cc27de388f85b11fff082bda4939a8707690cb8fb1177ad94a06de2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb3398038cc27de388f85b11fff082bda4939a8707690cb8fb1177ad94a06de2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb3398038cc27de388f85b11fff082bda4939a8707690cb8fb1177ad94a06de2"}
{"level":"debug","ts":"2026-07-02T19:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb3398038cc27de388f85b11fff082bda4939a8707690cb8fb1177ad94a06de2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb3398038cc27de388f85b11fff082bda4939a8707690cb8fb1177ad94a06de2"}
{"level":"debug","ts":"2026-07-02T19:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb3398038cc27de388f85b11fff082bda4939a8707690cb8fb1177ad94a06de2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb3398038cc27de388f85b11fff082bda4939a8707690cb8fb1177ad94a06de2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb3398038cc27de388f85b11fff082bda4939a8707690cb8fb1177ad94a06de2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb3398038cc27de388f85b11fff082bda4939a8707690cb8fb1177ad94a06de2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb3398038cc27de388f85b11fff082bda4939a8707690cb8fb1177ad94a06de2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb3398038cc27de388f85b11fff082bda4939a8707690cb8fb1177ad94a06de2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb3398038cc27de388f85b11fff082bda4939a8707690cb8fb1177ad94a06de2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb3398038cc27de388f85b11fff082bda4939a8707690cb8fb1177ad94a06de2"}
{"level":"debug","ts":"2026-07-02T19:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb3398038cc27de388f85b11fff082bda4939a8707690cb8fb1177ad94a06de2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb3398038cc27de388f85b11fff082bda4939a8707690cb8fb1177ad94a06de2"}
{"level":"debug","ts":"2026-07-02T19:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb3398038cc27de388f85b11fff082bda4939a8707690cb8fb1177ad94a06de2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb3398038cc27de388f85b11fff082bda4939a8707690cb8fb1177ad94a06de2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb3398038cc27de388f85b11fff082bda4939a8707690cb8fb1177ad94a06de2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb3398038cc27de388f85b11fff082bda4939a8707690cb8fb1177ad94a06de2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb3398038cc27de388f85b11fff082bda4939a8707690cb8fb1177ad94a06de2"}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54"}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54"}
{"level":"error","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54"}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54"}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54"}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54"}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f"}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f"}
{"level":"error","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9774520c9f1f0f0e43d8330755488cde1c156d20923f412beac56429adc45e7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9774520c9f1f0f0e43d8330755488cde1c156d20923f412beac56429adc45e7a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f"}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9774520c9f1f0f0e43d8330755488cde1c156d20923f412beac56429adc45e7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9774520c9f1f0f0e43d8330755488cde1c156d20923f412beac56429adc45e7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9774520c9f1f0f0e43d8330755488cde1c156d20923f412beac56429adc45e7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9774520c9f1f0f0e43d8330755488cde1c156d20923f412beac56429adc45e7a"}
{"level":"error","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9774520c9f1f0f0e43d8330755488cde1c156d20923f412beac56429adc45e7a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9774520c9f1f0f0e43d8330755488cde1c156d20923f412beac56429adc45e7a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9774520c9f1f0f0e43d8330755488cde1c156d20923f412beac56429adc45e7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9774520c9f1f0f0e43d8330755488cde1c156d20923f412beac56429adc45e7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9774520c9f1f0f0e43d8330755488cde1c156d20923f412beac56429adc45e7a"}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f"}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f"}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1521b02449e2844ed7255bb3974d05a17d4ba3d5d9993ce190be84f2c3b875d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1521b02449e2844ed7255bb3974d05a17d4ba3d5d9993ce190be84f2c3b875d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f"}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9774520c9f1f0f0e43d8330755488cde1c156d20923f412beac56429adc45e7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9774520c9f1f0f0e43d8330755488cde1c156d20923f412beac56429adc45e7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1521b02449e2844ed7255bb3974d05a17d4ba3d5d9993ce190be84f2c3b875d6"}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9774520c9f1f0f0e43d8330755488cde1c156d20923f412beac56429adc45e7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f"}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1521b02449e2844ed7255bb3974d05a17d4ba3d5d9993ce190be84f2c3b875d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1521b02449e2844ed7255bb3974d05a17d4ba3d5d9993ce190be84f2c3b875d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1521b02449e2844ed7255bb3974d05a17d4ba3d5d9993ce190be84f2c3b875d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f"}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9774520c9f1f0f0e43d8330755488cde1c156d20923f412beac56429adc45e7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1521b02449e2844ed7255bb3974d05a17d4ba3d5d9993ce190be84f2c3b875d6"}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1521b02449e2844ed7255bb3974d05a17d4ba3d5d9993ce190be84f2c3b875d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9774520c9f1f0f0e43d8330755488cde1c156d20923f412beac56429adc45e7a"}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f"}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd"}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f"}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f"}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd"}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115"}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f"}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd"}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115"}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f"}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd"}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115"}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f"}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd"}
{"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115"}
{"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32"}
{"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32"}
{"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a8a54288e54f71905d29f9ec90a254a7f5d04449513208b4ee79ce4c707492e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32"}
{"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a8a54288e54f71905d29f9ec90a254a7f5d04449513208b4ee79ce4c707492e"}
{"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32"}
{"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32"}
{"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32"}
{"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32"}
{"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32"}
{"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32"}
{"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54"}
{"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54"}
{"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a8ee81517365a92d4fc0523a8f86a765667b18b7272d4a857c51f5b6b81764c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a8ee81517365a92d4fc0523a8f86a765667b18b7272d4a857c51f5b6b81764c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a8ee81517365a92d4fc0523a8f86a765667b18b7272d4a857c51f5b6b81764c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a8ee81517365a92d4fc0523a8f86a765667b18b7272d4a857c51f5b6b81764c"}
{"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a8ee81517365a92d4fc0523a8f86a765667b18b7272d4a857c51f5b6b81764c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a8ee81517365a92d4fc0523a8f86a765667b18b7272d4a857c51f5b6b81764c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a8ee81517365a92d4fc0523a8f86a765667b18b7272d4a857c51f5b6b81764c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a8ee81517365a92d4fc0523a8f86a765667b18b7272d4a857c51f5b6b81764c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54"}
{"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a8ee81517365a92d4fc0523a8f86a765667b18b7272d4a857c51f5b6b81764c"}
{"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115"}
{"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115"}
{"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c557622291a6f60d739df5301771e2f4b41fdd188c8312c81c6476a9c4ef1d09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c557622291a6f60d739df5301771e2f4b41fdd188c8312c81c6476a9c4ef1d09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e85a47a1ca462ce8633acdfa8f2d9f8620a635efea8b88209c123b8f38157913","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c557622291a6f60d739df5301771e2f4b41fdd188c8312c81c6476a9c4ef1d09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c557622291a6f60d739df5301771e2f4b41fdd188c8312c81c6476a9c4ef1d09","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c557622291a6f60d739df5301771e2f4b41fdd188c8312c81c6476a9c4ef1d09"}
{"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c557622291a6f60d739df5301771e2f4b41fdd188c8312c81c6476a9c4ef1d09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c557622291a6f60d739df5301771e2f4b41fdd188c8312c81c6476a9c4ef1d09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115"}
{"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c557622291a6f60d739df5301771e2f4b41fdd188c8312c81c6476a9c4ef1d09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c557622291a6f60d739df5301771e2f4b41fdd188c8312c81c6476a9c4ef1d09","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e85a47a1ca462ce8633acdfa8f2d9f8620a635efea8b88209c123b8f38157913"}
{"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c557622291a6f60d739df5301771e2f4b41fdd188c8312c81c6476a9c4ef1d09"}
{"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd"}
{"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd"}
{"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb3398038cc27de388f85b11fff082bda4939a8707690cb8fb1177ad94a06de2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd"}
{"level":"info","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb3398038cc27de388f85b11fff082bda4939a8707690cb8fb1177ad94a06de2"}
{"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1521b02449e2844ed7255bb3974d05a17d4ba3d5d9993ce190be84f2c3b875d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f"}
{"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c8b16b10a881a22414be5649037dc20f792a1905e33c281a7cf5c05775df0af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1521b02449e2844ed7255bb3974d05a17d4ba3d5d9993ce190be84f2c3b875d6"}
{"level":"info","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f"}
{"level":"info","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c8b16b10a881a22414be5649037dc20f792a1905e33c281a7cf5c05775df0af"}
{"level":"error","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9774520c9f1f0f0e43d8330755488cde1c156d20923f412beac56429adc45e7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f"}
{"level":"error","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d07741af706c0487a2c0da30992dde42499941a401459bf315cee6ff29fc6e3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"874aa2e5cd9d0df9909f8df1b2ceb5cc34ce1817dcffda3b4535a1b8ceb90c2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9774520c9f1f0f0e43d8330755488cde1c156d20923f412beac56429adc45e7a"}
{"level":"error","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a1492035373c1194ed017f175174ad0a63fe2ac73467ef498e9c69b3962dc99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d07741af706c0487a2c0da30992dde42499941a401459bf315cee6ff29fc6e3c"}
{"level":"info","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f"}
{"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b689bdee41c322d0da156dbb24fef606e16d1421d83bc4f303e342580383d921","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/874aa2e5cd9d0df9909f8df1b2ceb5cc34ce1817dcffda3b4535a1b8ceb90c2a"}
{"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a1492035373c1194ed017f175174ad0a63fe2ac73467ef498e9c69b3962dc99"}
{"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08bef13984dd5b2db77599cf13808bbe0d45fd639e73de0f7e44ab6a87ccfc61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6168701e1b0602b5427307b31a589c1df2dac63153ca5a3dba0a468a78e99de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b689bdee41c322d0da156dbb24fef606e16d1421d83bc4f303e342580383d921"}
{"level":"info","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f"}
{"level":"info","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08bef13984dd5b2db77599cf13808bbe0d45fd639e73de0f7e44ab6a87ccfc61"}
{"level":"info","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6168701e1b0602b5427307b31a589c1df2dac63153ca5a3dba0a468a78e99de"}
{"level":"info","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"76b1bc6c-70e8-469e-bd90-df2ec1b133db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:43574","PortSpecifier":{"PortValue":43574}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"76b1bc6c-70e8-469e-bd90-df2ec1b133db","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"76b1bc6c-70e8-469e-bd90-df2ec1b133db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:43574","PortSpecifier":{"PortValue":43574}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021402,"nanos":387377270},"http":{"id":"76b1bc6c-70e8-469e-bd90-df2ec1b133db","method":"POST","headers":{":authority":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"76b1bc6c-70e8-469e-bd90-df2ec1b133db","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"76b1bc6c-70e8-469e-bd90-df2ec1b133db","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"]}}
{"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"76b1bc6c-70e8-469e-bd90-df2ec1b133db","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76b1bc6c-70e8-469e-bd90-df2ec1b133db","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76b1bc6c-70e8-469e-bd90-df2ec1b133db","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76b1bc6c-70e8-469e-bd90-df2ec1b133db","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"76b1bc6c-70e8-469e-bd90-df2ec1b133db","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76b1bc6c-70e8-469e-bd90-df2ec1b133db","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76b1bc6c-70e8-469e-bd90-df2ec1b133db","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"76b1bc6c-70e8-469e-bd90-df2ec1b133db","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"76b1bc6c-70e8-469e-bd90-df2ec1b133db","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9eaae0bc-18cc-40cc-8655-5fe9ce7ff4d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:44530","PortSpecifier":{"PortValue":44530}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9eaae0bc-18cc-40cc-8655-5fe9ce7ff4d3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9eaae0bc-18cc-40cc-8655-5fe9ce7ff4d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:44530","PortSpecifier":{"PortValue":44530}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021402,"nanos":431719176},"http":{"id":"9eaae0bc-18cc-40cc-8655-5fe9ce7ff4d3","method":"POST","headers":{":authority":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9eaae0bc-18cc-40cc-8655-5fe9ce7ff4d3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9eaae0bc-18cc-40cc-8655-5fe9ce7ff4d3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"]}}
{"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9eaae0bc-18cc-40cc-8655-5fe9ce7ff4d3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c557622291a6f60d739df5301771e2f4b41fdd188c8312c81c6476a9c4ef1d09"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9eaae0bc-18cc-40cc-8655-5fe9ce7ff4d3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9eaae0bc-18cc-40cc-8655-5fe9ce7ff4d3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9eaae0bc-18cc-40cc-8655-5fe9ce7ff4d3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8e566a/rate-test-model-8e566a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9eaae0bc-18cc-40cc-8655-5fe9ce7ff4d3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9eaae0bc-18cc-40cc-8655-5fe9ce7ff4d3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9eaae0bc-18cc-40cc-8655-5fe9ce7ff4d3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9eaae0bc-18cc-40cc-8655-5fe9ce7ff4d3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9eaae0bc-18cc-40cc-8655-5fe9ce7ff4d3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16024f6f-99ea-4213-854b-67c0785b4c92","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:43580","PortSpecifier":{"PortValue":43580}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"16024f6f-99ea-4213-854b-67c0785b4c92","method":"POST","path":"/ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c/v1/completions","host":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16024f6f-99ea-4213-854b-67c0785b4c92","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:43580","PortSpecifier":{"PortValue":43580}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021402,"nanos":474532810},"http":{"id":"16024f6f-99ea-4213-854b-67c0785b4c92","method":"POST","headers":{":authority":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"16024f6f-99ea-4213-854b-67c0785b4c92","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-GvxJWjn1H81dJBfU_CmnU7S4SET2Q8J1KbMrnYojEMia6jBiEaqSSKncfSTS"}
{"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"16024f6f-99ea-4213-854b-67c0785b4c92","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-GvxJWjn1H81dJBfU_CmnU7S4SET2Q8J1KbMrnYojEMia6jBiEaqSSKncfSTS\"}"}
{"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"16024f6f-99ea-4213-854b-67c0785b4c92","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"167dae52-b878-4a74-8b70-8a68d3a1ddf9","keyName":"e2e-rate-a-c119d5","subscription":"e2e-rate-iso-a-c119d5","tenant":"e2e-shared-a-74b95c","userId":"167dae52-b878-4a74-8b70-8a68d3a1ddf9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"16024f6f-99ea-4213-854b-67c0785b4c92","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c\",\"requestedSubscription\":\"e2e-rate-iso-a-c119d5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"16024f6f-99ea-4213-854b-67c0785b4c92","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-74b95c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c119d5","namespace":"ai-tenant-e2e-shared-a-74b95c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"16024f6f-99ea-4213-854b-67c0785b4c92","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16024f6f-99ea-4213-854b-67c0785b4c92","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16024f6f-99ea-4213-854b-67c0785b4c92","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16024f6f-99ea-4213-854b-67c0785b4c92","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16024f6f-99ea-4213-854b-67c0785b4c92","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16024f6f-99ea-4213-854b-67c0785b4c92","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c119d5"}
{"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16024f6f-99ea-4213-854b-67c0785b4c92","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16024f6f-99ea-4213-854b-67c0785b4c92","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16024f6f-99ea-4213-854b-67c0785b4c92","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"167dae52-b878-4a74-8b70-8a68d3a1ddf9","keyName":"e2e-rate-a-c119d5","selected_subscription":"e2e-rate-iso-a-c119d5","selected_subscription_key":"ai-tenant-e2e-shared-a-74b95c/e2e-rate-iso-a-c119d5@ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-74b95c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c119d5","namespace":"ai-tenant-e2e-shared-a-74b95c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16024f6f-99ea-4213-854b-67c0785b4c92","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16024f6f-99ea-4213-854b-67c0785b4c92","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:43:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d87b41b0-df4e-42c1-88a0-16cda372d4ad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:43582","PortSpecifier":{"PortValue":43582}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d87b41b0-df4e-42c1-88a0-16cda372d4ad","method":"POST","path":"/ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c/v1/completions","host":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:43:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d87b41b0-df4e-42c1-88a0-16cda372d4ad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:43582","PortSpecifier":{"PortValue":43582}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021403,"nanos":542137488},"http":{"id":"d87b41b0-df4e-42c1-88a0-16cda372d4ad","method":"POST","headers":{":authority":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:43:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d87b41b0-df4e-42c1-88a0-16cda372d4ad","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-GvxJWjn1H81dJBfU_CmnU7S4SET2Q8J1KbMrnYojEMia6jBiEaqSSKncfSTS"}
{"level":"debug","ts":"2026-07-02T19:43:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d87b41b0-df4e-42c1-88a0-16cda372d4ad","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-GvxJWjn1H81dJBfU_CmnU7S4SET2Q8J1KbMrnYojEMia6jBiEaqSSKncfSTS\"}"}
{"level":"debug","ts":"2026-07-02T19:43:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d87b41b0-df4e-42c1-88a0-16cda372d4ad","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"167dae52-b878-4a74-8b70-8a68d3a1ddf9","keyName":"e2e-rate-a-c119d5","subscription":"e2e-rate-iso-a-c119d5","tenant":"e2e-shared-a-74b95c","userId":"167dae52-b878-4a74-8b70-8a68d3a1ddf9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T19:43:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d87b41b0-df4e-42c1-88a0-16cda372d4ad","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c\",\"requestedSubscription\":\"e2e-rate-iso-a-c119d5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T19:43:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d87b41b0-df4e-42c1-88a0-16cda372d4ad","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-74b95c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c119d5","namespace":"ai-tenant-e2e-shared-a-74b95c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T19:43:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d87b41b0-df4e-42c1-88a0-16cda372d4ad","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:43:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d87b41b0-df4e-42c1-88a0-16cda372d4ad","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:43:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d87b41b0-df4e-42c1-88a0-16cda372d4ad","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:43:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d87b41b0-df4e-42c1-88a0-16cda372d4ad","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:43:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d87b41b0-df4e-42c1-88a0-16cda372d4ad","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:43:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d87b41b0-df4e-42c1-88a0-16cda372d4ad","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:43:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d87b41b0-df4e-42c1-88a0-16cda372d4ad","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c119d5"}
{"level":"debug","ts":"2026-07-02T19:43:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d87b41b0-df4e-42c1-88a0-16cda372d4ad","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T19:43:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d87b41b0-df4e-42c1-88a0-16cda372d4ad","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"167dae52-b878-4a74-8b70-8a68d3a1ddf9","keyName":"e2e-rate-a-c119d5","selected_subscription":"e2e-rate-iso-a-c119d5","selected_subscription_key":"ai-tenant-e2e-shared-a-74b95c/e2e-rate-iso-a-c119d5@ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-74b95c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c119d5","namespace":"ai-tenant-e2e-shared-a-74b95c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T19:43:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d87b41b0-df4e-42c1-88a0-16cda372d4ad","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:43:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d87b41b0-df4e-42c1-88a0-16cda372d4ad","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:43:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"113b70f1-e55e-4a53-8a50-24414bd8dfc2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:43590","PortSpecifier":{"PortValue":43590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"113b70f1-e55e-4a53-8a50-24414bd8dfc2","method":"POST","path":"/ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c/v1/completions","host":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:43:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"113b70f1-e55e-4a53-8a50-24414bd8dfc2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:43590","PortSpecifier":{"PortValue":43590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021404,"nanos":583102472},"http":{"id":"113b70f1-e55e-4a53-8a50-24414bd8dfc2","method":"POST","headers":{":authority":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:43:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"113b70f1-e55e-4a53-8a50-24414bd8dfc2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-GvxJWjn1H81dJBfU_CmnU7S4SET2Q8J1KbMrnYojEMia6jBiEaqSSKncfSTS"}
{"level":"debug","ts":"2026-07-02T19:43:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"113b70f1-e55e-4a53-8a50-24414bd8dfc2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-GvxJWjn1H81dJBfU_CmnU7S4SET2Q8J1KbMrnYojEMia6jBiEaqSSKncfSTS\"}"}
{"level":"debug","ts":"2026-07-02T19:43:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"113b70f1-e55e-4a53-8a50-24414bd8dfc2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"167dae52-b878-4a74-8b70-8a68d3a1ddf9","keyName":"e2e-rate-a-c119d5","subscription":"e2e-rate-iso-a-c119d5","tenant":"e2e-shared-a-74b95c","userId":"167dae52-b878-4a74-8b70-8a68d3a1ddf9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T19:43:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"113b70f1-e55e-4a53-8a50-24414bd8dfc2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c\",\"requestedSubscription\":\"e2e-rate-iso-a-c119d5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T19:43:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"113b70f1-e55e-4a53-8a50-24414bd8dfc2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-74b95c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c119d5","namespace":"ai-tenant-e2e-shared-a-74b95c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T19:43:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"113b70f1-e55e-4a53-8a50-24414bd8dfc2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:43:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"113b70f1-e55e-4a53-8a50-24414bd8dfc2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:43:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"113b70f1-e55e-4a53-8a50-24414bd8dfc2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:43:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"113b70f1-e55e-4a53-8a50-24414bd8dfc2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:43:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"113b70f1-e55e-4a53-8a50-24414bd8dfc2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:43:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"113b70f1-e55e-4a53-8a50-24414bd8dfc2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T19:43:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"113b70f1-e55e-4a53-8a50-24414bd8dfc2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:43:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"113b70f1-e55e-4a53-8a50-24414bd8dfc2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c119d5"}
{"level":"debug","ts":"2026-07-02T19:43:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"113b70f1-e55e-4a53-8a50-24414bd8dfc2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"167dae52-b878-4a74-8b70-8a68d3a1ddf9","keyName":"e2e-rate-a-c119d5","selected_subscription":"e2e-rate-iso-a-c119d5","selected_subscription_key":"ai-tenant-e2e-shared-a-74b95c/e2e-rate-iso-a-c119d5@ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-74b95c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c119d5","namespace":"ai-tenant-e2e-shared-a-74b95c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T19:43:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"113b70f1-e55e-4a53-8a50-24414bd8dfc2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:43:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"113b70f1-e55e-4a53-8a50-24414bd8dfc2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ecfb6e9d-e9bf-4133-b3d1-6d7641fe5970","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:40760","PortSpecifier":{"PortValue":40760}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ecfb6e9d-e9bf-4133-b3d1-6d7641fe5970","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ecfb6e9d-e9bf-4133-b3d1-6d7641fe5970","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:40760","PortSpecifier":{"PortValue":40760}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021417,"nanos":491720143},"http":{"id":"ecfb6e9d-e9bf-4133-b3d1-6d7641fe5970","method":"POST","headers":{":authority":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ecfb6e9d-e9bf-4133-b3d1-6d7641fe5970","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ecfb6e9d-e9bf-4133-b3d1-6d7641fe5970","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"]}}
{"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ecfb6e9d-e9bf-4133-b3d1-6d7641fe5970","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ecfb6e9d-e9bf-4133-b3d1-6d7641fe5970","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ecfb6e9d-e9bf-4133-b3d1-6d7641fe5970","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ecfb6e9d-e9bf-4133-b3d1-6d7641fe5970","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ecfb6e9d-e9bf-4133-b3d1-6d7641fe5970","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ecfb6e9d-e9bf-4133-b3d1-6d7641fe5970","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ecfb6e9d-e9bf-4133-b3d1-6d7641fe5970","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ecfb6e9d-e9bf-4133-b3d1-6d7641fe5970","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ecfb6e9d-e9bf-4133-b3d1-6d7641fe5970","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"efd0ca61-22c9-4f51-85be-177ab85f4905","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:48964","PortSpecifier":{"PortValue":48964}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"efd0ca61-22c9-4f51-85be-177ab85f4905","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"efd0ca61-22c9-4f51-85be-177ab85f4905","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:48964","PortSpecifier":{"PortValue":48964}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021417,"nanos":531182253},"http":{"id":"efd0ca61-22c9-4f51-85be-177ab85f4905","method":"POST","headers":{":authority":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"efd0ca61-22c9-4f51-85be-177ab85f4905","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"efd0ca61-22c9-4f51-85be-177ab85f4905","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"]}}
{"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"efd0ca61-22c9-4f51-85be-177ab85f4905","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c557622291a6f60d739df5301771e2f4b41fdd188c8312c81c6476a9c4ef1d09"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"efd0ca61-22c9-4f51-85be-177ab85f4905","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"efd0ca61-22c9-4f51-85be-177ab85f4905","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"efd0ca61-22c9-4f51-85be-177ab85f4905","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8e566a/rate-test-model-8e566a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"efd0ca61-22c9-4f51-85be-177ab85f4905","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"efd0ca61-22c9-4f51-85be-177ab85f4905","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"efd0ca61-22c9-4f51-85be-177ab85f4905","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"efd0ca61-22c9-4f51-85be-177ab85f4905","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"efd0ca61-22c9-4f51-85be-177ab85f4905","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef8d4145-03d5-4825-b7be-cbe5812c9cff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:40774","PortSpecifier":{"PortValue":40774}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ef8d4145-03d5-4825-b7be-cbe5812c9cff","method":"POST","path":"/ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c/v1/completions","host":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef8d4145-03d5-4825-b7be-cbe5812c9cff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:40774","PortSpecifier":{"PortValue":40774}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021417,"nanos":581051424},"http":{"id":"ef8d4145-03d5-4825-b7be-cbe5812c9cff","method":"POST","headers":{":authority":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ef8d4145-03d5-4825-b7be-cbe5812c9cff","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1LXQMWRnmjTmMfJwf_MuWjv8V6mQLkP97Qw9i3SYFZV3vvuyZI7Dyvzjh4gbw"}
{"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ef8d4145-03d5-4825-b7be-cbe5812c9cff","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1LXQMWRnmjTmMfJwf_MuWjv8V6mQLkP97Qw9i3SYFZV3vvuyZI7Dyvzjh4gbw\"}"}
{"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ef8d4145-03d5-4825-b7be-cbe5812c9cff","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"62e43a94-d5ce-47ee-adad-ca807c8de82c","keyName":"e2e-rate-a-706332","subscription":"e2e-rate-iso-a-706332","tenant":"e2e-shared-a-74b95c","userId":"62e43a94-d5ce-47ee-adad-ca807c8de82c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ef8d4145-03d5-4825-b7be-cbe5812c9cff","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c\",\"requestedSubscription\":\"e2e-rate-iso-a-706332\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ef8d4145-03d5-4825-b7be-cbe5812c9cff","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-74b95c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-706332","namespace":"ai-tenant-e2e-shared-a-74b95c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ef8d4145-03d5-4825-b7be-cbe5812c9cff","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef8d4145-03d5-4825-b7be-cbe5812c9cff","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef8d4145-03d5-4825-b7be-cbe5812c9cff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef8d4145-03d5-4825-b7be-cbe5812c9cff","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef8d4145-03d5-4825-b7be-cbe5812c9cff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef8d4145-03d5-4825-b7be-cbe5812c9cff","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-706332"}
{"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef8d4145-03d5-4825-b7be-cbe5812c9cff","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef8d4145-03d5-4825-b7be-cbe5812c9cff","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef8d4145-03d5-4825-b7be-cbe5812c9cff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"62e43a94-d5ce-47ee-adad-ca807c8de82c","keyName":"e2e-rate-a-706332","selected_subscription":"e2e-rate-iso-a-706332","selected_subscription_key":"ai-tenant-e2e-shared-a-74b95c/e2e-rate-iso-a-706332@ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-74b95c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-706332","namespace":"ai-tenant-e2e-shared-a-74b95c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef8d4145-03d5-4825-b7be-cbe5812c9cff","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef8d4145-03d5-4825-b7be-cbe5812c9cff","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:43:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48a71dd7-2f93-4cc4-977c-c8bce5bf4f48","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:40784","PortSpecifier":{"PortValue":40784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"48a71dd7-2f93-4cc4-977c-c8bce5bf4f48","method":"POST","path":"/ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c/v1/completions","host":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:43:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48a71dd7-2f93-4cc4-977c-c8bce5bf4f48","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:40784","PortSpecifier":{"PortValue":40784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021418,"nanos":623299313},"http":{"id":"48a71dd7-2f93-4cc4-977c-c8bce5bf4f48","method":"POST","headers":{":authority":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:43:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"48a71dd7-2f93-4cc4-977c-c8bce5bf4f48","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1LXQMWRnmjTmMfJwf_MuWjv8V6mQLkP97Qw9i3SYFZV3vvuyZI7Dyvzjh4gbw"}
{"level":"debug","ts":"2026-07-02T19:43:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"48a71dd7-2f93-4cc4-977c-c8bce5bf4f48","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1LXQMWRnmjTmMfJwf_MuWjv8V6mQLkP97Qw9i3SYFZV3vvuyZI7Dyvzjh4gbw\"}"}
{"level":"debug","ts":"2026-07-02T19:43:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"48a71dd7-2f93-4cc4-977c-c8bce5bf4f48","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"62e43a94-d5ce-47ee-adad-ca807c8de82c","keyName":"e2e-rate-a-706332","subscription":"e2e-rate-iso-a-706332","tenant":"e2e-shared-a-74b95c","userId":"62e43a94-d5ce-47ee-adad-ca807c8de82c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T19:43:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"48a71dd7-2f93-4cc4-977c-c8bce5bf4f48","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c\",\"requestedSubscription\":\"e2e-rate-iso-a-706332\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T19:43:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"48a71dd7-2f93-4cc4-977c-c8bce5bf4f48","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-74b95c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-706332","namespace":"ai-tenant-e2e-shared-a-74b95c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T19:43:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"48a71dd7-2f93-4cc4-977c-c8bce5bf4f48","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:43:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48a71dd7-2f93-4cc4-977c-c8bce5bf4f48","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:43:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48a71dd7-2f93-4cc4-977c-c8bce5bf4f48","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:43:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48a71dd7-2f93-4cc4-977c-c8bce5bf4f48","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:43:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48a71dd7-2f93-4cc4-977c-c8bce5bf4f48","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:43:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48a71dd7-2f93-4cc4-977c-c8bce5bf4f48","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-706332"}
{"level":"debug","ts":"2026-07-02T19:43:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48a71dd7-2f93-4cc4-977c-c8bce5bf4f48","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:43:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48a71dd7-2f93-4cc4-977c-c8bce5bf4f48","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T19:43:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48a71dd7-2f93-4cc4-977c-c8bce5bf4f48","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"62e43a94-d5ce-47ee-adad-ca807c8de82c","keyName":"e2e-rate-a-706332","selected_subscription":"e2e-rate-iso-a-706332","selected_subscription_key":"ai-tenant-e2e-shared-a-74b95c/e2e-rate-iso-a-706332@ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-74b95c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-706332","namespace":"ai-tenant-e2e-shared-a-74b95c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T19:43:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48a71dd7-2f93-4cc4-977c-c8bce5bf4f48","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:43:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48a71dd7-2f93-4cc4-977c-c8bce5bf4f48","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"338b3f93-9609-4571-809a-92f26fee1135","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:40796","PortSpecifier":{"PortValue":40796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"338b3f93-9609-4571-809a-92f26fee1135","method":"POST","path":"/ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c/v1/completions","host":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"338b3f93-9609-4571-809a-92f26fee1135","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:40796","PortSpecifier":{"PortValue":40796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021419,"nanos":663963253},"http":{"id":"338b3f93-9609-4571-809a-92f26fee1135","method":"POST","headers":{":authority":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"338b3f93-9609-4571-809a-92f26fee1135","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1LXQMWRnmjTmMfJwf_MuWjv8V6mQLkP97Qw9i3SYFZV3vvuyZI7Dyvzjh4gbw"}
{"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"338b3f93-9609-4571-809a-92f26fee1135","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1LXQMWRnmjTmMfJwf_MuWjv8V6mQLkP97Qw9i3SYFZV3vvuyZI7Dyvzjh4gbw\"}"}
{"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"338b3f93-9609-4571-809a-92f26fee1135","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"62e43a94-d5ce-47ee-adad-ca807c8de82c","keyName":"e2e-rate-a-706332","subscription":"e2e-rate-iso-a-706332","tenant":"e2e-shared-a-74b95c","userId":"62e43a94-d5ce-47ee-adad-ca807c8de82c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"338b3f93-9609-4571-809a-92f26fee1135","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c\",\"requestedSubscription\":\"e2e-rate-iso-a-706332\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"338b3f93-9609-4571-809a-92f26fee1135","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-74b95c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-706332","namespace":"ai-tenant-e2e-shared-a-74b95c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"338b3f93-9609-4571-809a-92f26fee1135","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"338b3f93-9609-4571-809a-92f26fee1135","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"338b3f93-9609-4571-809a-92f26fee1135","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"338b3f93-9609-4571-809a-92f26fee1135","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"338b3f93-9609-4571-809a-92f26fee1135","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"338b3f93-9609-4571-809a-92f26fee1135","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"338b3f93-9609-4571-809a-92f26fee1135","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"338b3f93-9609-4571-809a-92f26fee1135","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-706332"}
{"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"338b3f93-9609-4571-809a-92f26fee1135","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"62e43a94-d5ce-47ee-adad-ca807c8de82c","keyName":"e2e-rate-a-706332","selected_subscription":"e2e-rate-iso-a-706332","selected_subscription_key":"ai-tenant-e2e-shared-a-74b95c/e2e-rate-iso-a-706332@ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-74b95c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-706332","namespace":"ai-tenant-e2e-shared-a-74b95c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"338b3f93-9609-4571-809a-92f26fee1135","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"338b3f93-9609-4571-809a-92f26fee1135","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8dfc48e6-9c5a-4998-ae86-1cdcb2dec2aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:48978","PortSpecifier":{"PortValue":48978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8dfc48e6-9c5a-4998-ae86-1cdcb2dec2aa","method":"POST","path":"/ai-tenant-e2e-shared-b-8e566a/rate-test-model-8e566a/v1/completions","host":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8dfc48e6-9c5a-4998-ae86-1cdcb2dec2aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:48978","PortSpecifier":{"PortValue":48978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021419,"nanos":703866939},"http":{"id":"8dfc48e6-9c5a-4998-ae86-1cdcb2dec2aa","method":"POST","headers":{":authority":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-8e566a/rate-test-model-8e566a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8dfc48e6-9c5a-4998-ae86-1cdcb2dec2aa","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Sj7tzbG162PaP4xy_8xt3ThQXmtaud0yIqeLvFs7s4igIUsajnwLAHpP7G5Q"}
{"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8dfc48e6-9c5a-4998-ae86-1cdcb2dec2aa","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-8e566a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Sj7tzbG162PaP4xy_8xt3ThQXmtaud0yIqeLvFs7s4igIUsajnwLAHpP7G5Q\"}"}
{"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8dfc48e6-9c5a-4998-ae86-1cdcb2dec2aa","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-8e566a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d26a96ce-eb7e-430a-b801-f2b1c575be6d","keyName":"e2e-rate-b-706332","subscription":"e2e-rate-iso-b-706332","tenant":"e2e-shared-b-8e566a","userId":"d26a96ce-eb7e-430a-b801-f2b1c575be6d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8dfc48e6-9c5a-4998-ae86-1cdcb2dec2aa","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-8e566a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-8e566a/rate-test-model-8e566a\",\"requestedSubscription\":\"e2e-rate-iso-b-706332\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8dfc48e6-9c5a-4998-ae86-1cdcb2dec2aa","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-8e566a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8e566a","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-706332","namespace":"ai-tenant-e2e-shared-b-8e566a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8dfc48e6-9c5a-4998-ae86-1cdcb2dec2aa","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8dfc48e6-9c5a-4998-ae86-1cdcb2dec2aa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8dfc48e6-9c5a-4998-ae86-1cdcb2dec2aa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8e566a/rate-test-model-8e566a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8dfc48e6-9c5a-4998-ae86-1cdcb2dec2aa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8dfc48e6-9c5a-4998-ae86-1cdcb2dec2aa","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8dfc48e6-9c5a-4998-ae86-1cdcb2dec2aa","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8dfc48e6-9c5a-4998-ae86-1cdcb2dec2aa","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-706332"}
{"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8dfc48e6-9c5a-4998-ae86-1cdcb2dec2aa","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8dfc48e6-9c5a-4998-ae86-1cdcb2dec2aa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d26a96ce-eb7e-430a-b801-f2b1c575be6d","keyName":"e2e-rate-b-706332","selected_subscription":"e2e-rate-iso-b-706332","selected_subscription_key":"ai-tenant-e2e-shared-b-8e566a/e2e-rate-iso-b-706332@ai-tenant-e2e-shared-b-8e566a/rate-test-model-8e566a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8e566a","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-706332","namespace":"ai-tenant-e2e-shared-b-8e566a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8dfc48e6-9c5a-4998-ae86-1cdcb2dec2aa","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8dfc48e6-9c5a-4998-ae86-1cdcb2dec2aa","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/874aa2e5cd9d0df9909f8df1b2ceb5cc34ce1817dcffda3b4535a1b8ceb90c2a"}
{"level":"info","ts":"2026-07-02T19:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e85a47a1ca462ce8633acdfa8f2d9f8620a635efea8b88209c123b8f38157913"}
{"level":"info","ts":"2026-07-02T19:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/08bef13984dd5b2db77599cf13808bbe0d45fd639e73de0f7e44ab6a87ccfc61"}
{"level":"info","ts":"2026-07-02T19:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32"}
{"level":"info","ts":"2026-07-02T19:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb3398038cc27de388f85b11fff082bda4939a8707690cb8fb1177ad94a06de2"}
{"level":"info","ts":"2026-07-02T19:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c8b16b10a881a22414be5649037dc20f792a1905e33c281a7cf5c05775df0af"}
{"level":"info","ts":"2026-07-02T19:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115"}
{"level":"info","ts":"2026-07-02T19:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f"}
{"level":"info","ts":"2026-07-02T19:43:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9774520c9f1f0f0e43d8330755488cde1c156d20923f412beac56429adc45e7a"}
{"level":"info","ts":"2026-07-02T19:43:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b689bdee41c322d0da156dbb24fef606e16d1421d83bc4f303e342580383d921"}
{"level":"info","ts":"2026-07-02T19:43:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd"}
{"level":"info","ts":"2026-07-02T19:43:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9a8a54288e54f71905d29f9ec90a254a7f5d04449513208b4ee79ce4c707492e"}
{"level":"info","ts":"2026-07-02T19:43:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a8ee81517365a92d4fc0523a8f86a765667b18b7272d4a857c51f5b6b81764c"}
{"level":"info","ts":"2026-07-02T19:43:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1521b02449e2844ed7255bb3974d05a17d4ba3d5d9993ce190be84f2c3b875d6"}
{"level":"info","ts":"2026-07-02T19:43:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f"}
{"level":"info","ts":"2026-07-02T19:43:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54"}
{"level":"info","ts":"2026-07-02T19:43:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6168701e1b0602b5427307b31a589c1df2dac63153ca5a3dba0a468a78e99de"}
{"level":"info","ts":"2026-07-02T19:43:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d07741af706c0487a2c0da30992dde42499941a401459bf315cee6ff29fc6e3c"}
{"level":"info","ts":"2026-07-02T19:44:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a1492035373c1194ed017f175174ad0a63fe2ac73467ef498e9c69b3962dc99"}
{"level":"info","ts":"2026-07-02T19:44:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c557622291a6f60d739df5301771e2f4b41fdd188c8312c81c6476a9c4ef1d09"}