{"level":"info","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b689bdee41c322d0da156dbb24fef606e16d1421d83bc4f303e342580383d921"} {"level":"info","ts":"2026-07-02T19:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c8b16b10a881a22414be5649037dc20f792a1905e33c281a7cf5c05775df0af"} {"level":"debug","ts":"2026-07-02T19:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb3398038cc27de388f85b11fff082bda4939a8707690cb8fb1177ad94a06de2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb3398038cc27de388f85b11fff082bda4939a8707690cb8fb1177ad94a06de2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb3398038cc27de388f85b11fff082bda4939a8707690cb8fb1177ad94a06de2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb3398038cc27de388f85b11fff082bda4939a8707690cb8fb1177ad94a06de2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb3398038cc27de388f85b11fff082bda4939a8707690cb8fb1177ad94a06de2"} {"level":"debug","ts":"2026-07-02T19:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb3398038cc27de388f85b11fff082bda4939a8707690cb8fb1177ad94a06de2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb3398038cc27de388f85b11fff082bda4939a8707690cb8fb1177ad94a06de2"} {"level":"debug","ts":"2026-07-02T19:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb3398038cc27de388f85b11fff082bda4939a8707690cb8fb1177ad94a06de2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb3398038cc27de388f85b11fff082bda4939a8707690cb8fb1177ad94a06de2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb3398038cc27de388f85b11fff082bda4939a8707690cb8fb1177ad94a06de2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb3398038cc27de388f85b11fff082bda4939a8707690cb8fb1177ad94a06de2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb3398038cc27de388f85b11fff082bda4939a8707690cb8fb1177ad94a06de2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb3398038cc27de388f85b11fff082bda4939a8707690cb8fb1177ad94a06de2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb3398038cc27de388f85b11fff082bda4939a8707690cb8fb1177ad94a06de2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb3398038cc27de388f85b11fff082bda4939a8707690cb8fb1177ad94a06de2"} {"level":"debug","ts":"2026-07-02T19:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb3398038cc27de388f85b11fff082bda4939a8707690cb8fb1177ad94a06de2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb3398038cc27de388f85b11fff082bda4939a8707690cb8fb1177ad94a06de2"} {"level":"debug","ts":"2026-07-02T19:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb3398038cc27de388f85b11fff082bda4939a8707690cb8fb1177ad94a06de2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb3398038cc27de388f85b11fff082bda4939a8707690cb8fb1177ad94a06de2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb3398038cc27de388f85b11fff082bda4939a8707690cb8fb1177ad94a06de2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb3398038cc27de388f85b11fff082bda4939a8707690cb8fb1177ad94a06de2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb3398038cc27de388f85b11fff082bda4939a8707690cb8fb1177ad94a06de2"} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54"} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54"} {"level":"error","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54"} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54"} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54"} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54"} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f"} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f"} {"level":"error","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9774520c9f1f0f0e43d8330755488cde1c156d20923f412beac56429adc45e7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9774520c9f1f0f0e43d8330755488cde1c156d20923f412beac56429adc45e7a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f"} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9774520c9f1f0f0e43d8330755488cde1c156d20923f412beac56429adc45e7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9774520c9f1f0f0e43d8330755488cde1c156d20923f412beac56429adc45e7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9774520c9f1f0f0e43d8330755488cde1c156d20923f412beac56429adc45e7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9774520c9f1f0f0e43d8330755488cde1c156d20923f412beac56429adc45e7a"} {"level":"error","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9774520c9f1f0f0e43d8330755488cde1c156d20923f412beac56429adc45e7a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9774520c9f1f0f0e43d8330755488cde1c156d20923f412beac56429adc45e7a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9774520c9f1f0f0e43d8330755488cde1c156d20923f412beac56429adc45e7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9774520c9f1f0f0e43d8330755488cde1c156d20923f412beac56429adc45e7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9774520c9f1f0f0e43d8330755488cde1c156d20923f412beac56429adc45e7a"} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f"} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f"} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1521b02449e2844ed7255bb3974d05a17d4ba3d5d9993ce190be84f2c3b875d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1521b02449e2844ed7255bb3974d05a17d4ba3d5d9993ce190be84f2c3b875d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f"} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9774520c9f1f0f0e43d8330755488cde1c156d20923f412beac56429adc45e7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9774520c9f1f0f0e43d8330755488cde1c156d20923f412beac56429adc45e7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1521b02449e2844ed7255bb3974d05a17d4ba3d5d9993ce190be84f2c3b875d6"} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9774520c9f1f0f0e43d8330755488cde1c156d20923f412beac56429adc45e7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f"} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1521b02449e2844ed7255bb3974d05a17d4ba3d5d9993ce190be84f2c3b875d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1521b02449e2844ed7255bb3974d05a17d4ba3d5d9993ce190be84f2c3b875d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1521b02449e2844ed7255bb3974d05a17d4ba3d5d9993ce190be84f2c3b875d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f"} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9774520c9f1f0f0e43d8330755488cde1c156d20923f412beac56429adc45e7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1521b02449e2844ed7255bb3974d05a17d4ba3d5d9993ce190be84f2c3b875d6"} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1521b02449e2844ed7255bb3974d05a17d4ba3d5d9993ce190be84f2c3b875d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9774520c9f1f0f0e43d8330755488cde1c156d20923f412beac56429adc45e7a"} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f"} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd"} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f"} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f"} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd"} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115"} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f"} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd"} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115"} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f"} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd"} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115"} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f"} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd"} {"level":"info","ts":"2026-07-02T19:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115"} {"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32"} {"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32"} {"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a8a54288e54f71905d29f9ec90a254a7f5d04449513208b4ee79ce4c707492e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32"} {"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a8a54288e54f71905d29f9ec90a254a7f5d04449513208b4ee79ce4c707492e"} {"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32"} {"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32"} {"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32"} {"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32"} {"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32"} {"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32"} {"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54"} {"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54"} {"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a8ee81517365a92d4fc0523a8f86a765667b18b7272d4a857c51f5b6b81764c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a8ee81517365a92d4fc0523a8f86a765667b18b7272d4a857c51f5b6b81764c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a8ee81517365a92d4fc0523a8f86a765667b18b7272d4a857c51f5b6b81764c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a8ee81517365a92d4fc0523a8f86a765667b18b7272d4a857c51f5b6b81764c"} {"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a8ee81517365a92d4fc0523a8f86a765667b18b7272d4a857c51f5b6b81764c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a8ee81517365a92d4fc0523a8f86a765667b18b7272d4a857c51f5b6b81764c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a8ee81517365a92d4fc0523a8f86a765667b18b7272d4a857c51f5b6b81764c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a8ee81517365a92d4fc0523a8f86a765667b18b7272d4a857c51f5b6b81764c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54"} {"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a8ee81517365a92d4fc0523a8f86a765667b18b7272d4a857c51f5b6b81764c"} {"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115"} {"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115"} {"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c557622291a6f60d739df5301771e2f4b41fdd188c8312c81c6476a9c4ef1d09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c557622291a6f60d739df5301771e2f4b41fdd188c8312c81c6476a9c4ef1d09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e85a47a1ca462ce8633acdfa8f2d9f8620a635efea8b88209c123b8f38157913","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c557622291a6f60d739df5301771e2f4b41fdd188c8312c81c6476a9c4ef1d09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c557622291a6f60d739df5301771e2f4b41fdd188c8312c81c6476a9c4ef1d09","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c557622291a6f60d739df5301771e2f4b41fdd188c8312c81c6476a9c4ef1d09"} {"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c557622291a6f60d739df5301771e2f4b41fdd188c8312c81c6476a9c4ef1d09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c557622291a6f60d739df5301771e2f4b41fdd188c8312c81c6476a9c4ef1d09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115"} {"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c557622291a6f60d739df5301771e2f4b41fdd188c8312c81c6476a9c4ef1d09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c557622291a6f60d739df5301771e2f4b41fdd188c8312c81c6476a9c4ef1d09","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e85a47a1ca462ce8633acdfa8f2d9f8620a635efea8b88209c123b8f38157913"} {"level":"info","ts":"2026-07-02T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c557622291a6f60d739df5301771e2f4b41fdd188c8312c81c6476a9c4ef1d09"} {"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd"} {"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd"} {"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb3398038cc27de388f85b11fff082bda4939a8707690cb8fb1177ad94a06de2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd"} {"level":"info","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb3398038cc27de388f85b11fff082bda4939a8707690cb8fb1177ad94a06de2"} {"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1521b02449e2844ed7255bb3974d05a17d4ba3d5d9993ce190be84f2c3b875d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f"} {"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c8b16b10a881a22414be5649037dc20f792a1905e33c281a7cf5c05775df0af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1521b02449e2844ed7255bb3974d05a17d4ba3d5d9993ce190be84f2c3b875d6"} {"level":"info","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f"} {"level":"info","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c8b16b10a881a22414be5649037dc20f792a1905e33c281a7cf5c05775df0af"} {"level":"error","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9774520c9f1f0f0e43d8330755488cde1c156d20923f412beac56429adc45e7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:43:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:43:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f"} {"level":"error","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d07741af706c0487a2c0da30992dde42499941a401459bf315cee6ff29fc6e3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"874aa2e5cd9d0df9909f8df1b2ceb5cc34ce1817dcffda3b4535a1b8ceb90c2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:43:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:43:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9774520c9f1f0f0e43d8330755488cde1c156d20923f412beac56429adc45e7a"} {"level":"error","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a1492035373c1194ed017f175174ad0a63fe2ac73467ef498e9c69b3962dc99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d07741af706c0487a2c0da30992dde42499941a401459bf315cee6ff29fc6e3c"} {"level":"info","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f"} {"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b689bdee41c322d0da156dbb24fef606e16d1421d83bc4f303e342580383d921","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/874aa2e5cd9d0df9909f8df1b2ceb5cc34ce1817dcffda3b4535a1b8ceb90c2a"} {"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a1492035373c1194ed017f175174ad0a63fe2ac73467ef498e9c69b3962dc99"} {"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08bef13984dd5b2db77599cf13808bbe0d45fd639e73de0f7e44ab6a87ccfc61","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6168701e1b0602b5427307b31a589c1df2dac63153ca5a3dba0a468a78e99de","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b689bdee41c322d0da156dbb24fef606e16d1421d83bc4f303e342580383d921"} {"level":"info","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f"} {"level":"info","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08bef13984dd5b2db77599cf13808bbe0d45fd639e73de0f7e44ab6a87ccfc61"} {"level":"info","ts":"2026-07-02T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6168701e1b0602b5427307b31a589c1df2dac63153ca5a3dba0a468a78e99de"} {"level":"info","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"76b1bc6c-70e8-469e-bd90-df2ec1b133db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:43574","PortSpecifier":{"PortValue":43574}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"76b1bc6c-70e8-469e-bd90-df2ec1b133db","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"76b1bc6c-70e8-469e-bd90-df2ec1b133db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:43574","PortSpecifier":{"PortValue":43574}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021402,"nanos":387377270},"http":{"id":"76b1bc6c-70e8-469e-bd90-df2ec1b133db","method":"POST","headers":{":authority":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"76b1bc6c-70e8-469e-bd90-df2ec1b133db","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"76b1bc6c-70e8-469e-bd90-df2ec1b133db","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"]}} {"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"76b1bc6c-70e8-469e-bd90-df2ec1b133db","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76b1bc6c-70e8-469e-bd90-df2ec1b133db","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76b1bc6c-70e8-469e-bd90-df2ec1b133db","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76b1bc6c-70e8-469e-bd90-df2ec1b133db","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"76b1bc6c-70e8-469e-bd90-df2ec1b133db","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76b1bc6c-70e8-469e-bd90-df2ec1b133db","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76b1bc6c-70e8-469e-bd90-df2ec1b133db","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"76b1bc6c-70e8-469e-bd90-df2ec1b133db","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"76b1bc6c-70e8-469e-bd90-df2ec1b133db","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9eaae0bc-18cc-40cc-8655-5fe9ce7ff4d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:44530","PortSpecifier":{"PortValue":44530}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9eaae0bc-18cc-40cc-8655-5fe9ce7ff4d3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9eaae0bc-18cc-40cc-8655-5fe9ce7ff4d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:44530","PortSpecifier":{"PortValue":44530}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021402,"nanos":431719176},"http":{"id":"9eaae0bc-18cc-40cc-8655-5fe9ce7ff4d3","method":"POST","headers":{":authority":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9eaae0bc-18cc-40cc-8655-5fe9ce7ff4d3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9eaae0bc-18cc-40cc-8655-5fe9ce7ff4d3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"]}} {"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9eaae0bc-18cc-40cc-8655-5fe9ce7ff4d3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c557622291a6f60d739df5301771e2f4b41fdd188c8312c81c6476a9c4ef1d09"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9eaae0bc-18cc-40cc-8655-5fe9ce7ff4d3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9eaae0bc-18cc-40cc-8655-5fe9ce7ff4d3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9eaae0bc-18cc-40cc-8655-5fe9ce7ff4d3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8e566a/rate-test-model-8e566a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9eaae0bc-18cc-40cc-8655-5fe9ce7ff4d3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9eaae0bc-18cc-40cc-8655-5fe9ce7ff4d3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9eaae0bc-18cc-40cc-8655-5fe9ce7ff4d3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9eaae0bc-18cc-40cc-8655-5fe9ce7ff4d3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9eaae0bc-18cc-40cc-8655-5fe9ce7ff4d3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16024f6f-99ea-4213-854b-67c0785b4c92","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:43580","PortSpecifier":{"PortValue":43580}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"16024f6f-99ea-4213-854b-67c0785b4c92","method":"POST","path":"/ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c/v1/completions","host":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16024f6f-99ea-4213-854b-67c0785b4c92","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:43580","PortSpecifier":{"PortValue":43580}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021402,"nanos":474532810},"http":{"id":"16024f6f-99ea-4213-854b-67c0785b4c92","method":"POST","headers":{":authority":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"16024f6f-99ea-4213-854b-67c0785b4c92","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-GvxJWjn1H81dJBfU_CmnU7S4SET2Q8J1KbMrnYojEMia6jBiEaqSSKncfSTS"} {"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"16024f6f-99ea-4213-854b-67c0785b4c92","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-GvxJWjn1H81dJBfU_CmnU7S4SET2Q8J1KbMrnYojEMia6jBiEaqSSKncfSTS\"}"} {"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"16024f6f-99ea-4213-854b-67c0785b4c92","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"167dae52-b878-4a74-8b70-8a68d3a1ddf9","keyName":"e2e-rate-a-c119d5","subscription":"e2e-rate-iso-a-c119d5","tenant":"e2e-shared-a-74b95c","userId":"167dae52-b878-4a74-8b70-8a68d3a1ddf9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"16024f6f-99ea-4213-854b-67c0785b4c92","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c\",\"requestedSubscription\":\"e2e-rate-iso-a-c119d5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"16024f6f-99ea-4213-854b-67c0785b4c92","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-74b95c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c119d5","namespace":"ai-tenant-e2e-shared-a-74b95c","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"16024f6f-99ea-4213-854b-67c0785b4c92","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16024f6f-99ea-4213-854b-67c0785b4c92","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16024f6f-99ea-4213-854b-67c0785b4c92","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16024f6f-99ea-4213-854b-67c0785b4c92","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16024f6f-99ea-4213-854b-67c0785b4c92","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16024f6f-99ea-4213-854b-67c0785b4c92","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c119d5"} {"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16024f6f-99ea-4213-854b-67c0785b4c92","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16024f6f-99ea-4213-854b-67c0785b4c92","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16024f6f-99ea-4213-854b-67c0785b4c92","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"167dae52-b878-4a74-8b70-8a68d3a1ddf9","keyName":"e2e-rate-a-c119d5","selected_subscription":"e2e-rate-iso-a-c119d5","selected_subscription_key":"ai-tenant-e2e-shared-a-74b95c/e2e-rate-iso-a-c119d5@ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-74b95c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c119d5","namespace":"ai-tenant-e2e-shared-a-74b95c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16024f6f-99ea-4213-854b-67c0785b4c92","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-02T19:43:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16024f6f-99ea-4213-854b-67c0785b4c92","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-02T19:43:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d87b41b0-df4e-42c1-88a0-16cda372d4ad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:43582","PortSpecifier":{"PortValue":43582}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d87b41b0-df4e-42c1-88a0-16cda372d4ad","method":"POST","path":"/ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c/v1/completions","host":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-02T19:43:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d87b41b0-df4e-42c1-88a0-16cda372d4ad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:43582","PortSpecifier":{"PortValue":43582}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021403,"nanos":542137488},"http":{"id":"d87b41b0-df4e-42c1-88a0-16cda372d4ad","method":"POST","headers":{":authority":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:43:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d87b41b0-df4e-42c1-88a0-16cda372d4ad","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-GvxJWjn1H81dJBfU_CmnU7S4SET2Q8J1KbMrnYojEMia6jBiEaqSSKncfSTS"} {"level":"debug","ts":"2026-07-02T19:43:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d87b41b0-df4e-42c1-88a0-16cda372d4ad","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-GvxJWjn1H81dJBfU_CmnU7S4SET2Q8J1KbMrnYojEMia6jBiEaqSSKncfSTS\"}"} {"level":"debug","ts":"2026-07-02T19:43:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d87b41b0-df4e-42c1-88a0-16cda372d4ad","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"167dae52-b878-4a74-8b70-8a68d3a1ddf9","keyName":"e2e-rate-a-c119d5","subscription":"e2e-rate-iso-a-c119d5","tenant":"e2e-shared-a-74b95c","userId":"167dae52-b878-4a74-8b70-8a68d3a1ddf9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-02T19:43:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d87b41b0-df4e-42c1-88a0-16cda372d4ad","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c\",\"requestedSubscription\":\"e2e-rate-iso-a-c119d5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-02T19:43:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d87b41b0-df4e-42c1-88a0-16cda372d4ad","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-74b95c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c119d5","namespace":"ai-tenant-e2e-shared-a-74b95c","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-02T19:43:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d87b41b0-df4e-42c1-88a0-16cda372d4ad","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:43:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d87b41b0-df4e-42c1-88a0-16cda372d4ad","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:43:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d87b41b0-df4e-42c1-88a0-16cda372d4ad","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:43:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d87b41b0-df4e-42c1-88a0-16cda372d4ad","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:43:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d87b41b0-df4e-42c1-88a0-16cda372d4ad","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:43:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d87b41b0-df4e-42c1-88a0-16cda372d4ad","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-02T19:43:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d87b41b0-df4e-42c1-88a0-16cda372d4ad","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c119d5"} {"level":"debug","ts":"2026-07-02T19:43:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d87b41b0-df4e-42c1-88a0-16cda372d4ad","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-02T19:43:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d87b41b0-df4e-42c1-88a0-16cda372d4ad","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"167dae52-b878-4a74-8b70-8a68d3a1ddf9","keyName":"e2e-rate-a-c119d5","selected_subscription":"e2e-rate-iso-a-c119d5","selected_subscription_key":"ai-tenant-e2e-shared-a-74b95c/e2e-rate-iso-a-c119d5@ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-74b95c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c119d5","namespace":"ai-tenant-e2e-shared-a-74b95c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-02T19:43:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d87b41b0-df4e-42c1-88a0-16cda372d4ad","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-02T19:43:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d87b41b0-df4e-42c1-88a0-16cda372d4ad","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-02T19:43:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"113b70f1-e55e-4a53-8a50-24414bd8dfc2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:43590","PortSpecifier":{"PortValue":43590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"113b70f1-e55e-4a53-8a50-24414bd8dfc2","method":"POST","path":"/ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c/v1/completions","host":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-02T19:43:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"113b70f1-e55e-4a53-8a50-24414bd8dfc2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:43590","PortSpecifier":{"PortValue":43590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021404,"nanos":583102472},"http":{"id":"113b70f1-e55e-4a53-8a50-24414bd8dfc2","method":"POST","headers":{":authority":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:43:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"113b70f1-e55e-4a53-8a50-24414bd8dfc2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-GvxJWjn1H81dJBfU_CmnU7S4SET2Q8J1KbMrnYojEMia6jBiEaqSSKncfSTS"} {"level":"debug","ts":"2026-07-02T19:43:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"113b70f1-e55e-4a53-8a50-24414bd8dfc2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-GvxJWjn1H81dJBfU_CmnU7S4SET2Q8J1KbMrnYojEMia6jBiEaqSSKncfSTS\"}"} {"level":"debug","ts":"2026-07-02T19:43:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"113b70f1-e55e-4a53-8a50-24414bd8dfc2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"167dae52-b878-4a74-8b70-8a68d3a1ddf9","keyName":"e2e-rate-a-c119d5","subscription":"e2e-rate-iso-a-c119d5","tenant":"e2e-shared-a-74b95c","userId":"167dae52-b878-4a74-8b70-8a68d3a1ddf9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-02T19:43:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"113b70f1-e55e-4a53-8a50-24414bd8dfc2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c\",\"requestedSubscription\":\"e2e-rate-iso-a-c119d5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-02T19:43:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"113b70f1-e55e-4a53-8a50-24414bd8dfc2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-74b95c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c119d5","namespace":"ai-tenant-e2e-shared-a-74b95c","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-02T19:43:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"113b70f1-e55e-4a53-8a50-24414bd8dfc2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:43:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"113b70f1-e55e-4a53-8a50-24414bd8dfc2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:43:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"113b70f1-e55e-4a53-8a50-24414bd8dfc2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:43:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"113b70f1-e55e-4a53-8a50-24414bd8dfc2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:43:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"113b70f1-e55e-4a53-8a50-24414bd8dfc2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:43:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"113b70f1-e55e-4a53-8a50-24414bd8dfc2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-02T19:43:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"113b70f1-e55e-4a53-8a50-24414bd8dfc2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-02T19:43:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"113b70f1-e55e-4a53-8a50-24414bd8dfc2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c119d5"} {"level":"debug","ts":"2026-07-02T19:43:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"113b70f1-e55e-4a53-8a50-24414bd8dfc2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"167dae52-b878-4a74-8b70-8a68d3a1ddf9","keyName":"e2e-rate-a-c119d5","selected_subscription":"e2e-rate-iso-a-c119d5","selected_subscription_key":"ai-tenant-e2e-shared-a-74b95c/e2e-rate-iso-a-c119d5@ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-74b95c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c119d5","namespace":"ai-tenant-e2e-shared-a-74b95c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-02T19:43:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"113b70f1-e55e-4a53-8a50-24414bd8dfc2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-02T19:43:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"113b70f1-e55e-4a53-8a50-24414bd8dfc2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ecfb6e9d-e9bf-4133-b3d1-6d7641fe5970","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:40760","PortSpecifier":{"PortValue":40760}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ecfb6e9d-e9bf-4133-b3d1-6d7641fe5970","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ecfb6e9d-e9bf-4133-b3d1-6d7641fe5970","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:40760","PortSpecifier":{"PortValue":40760}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021417,"nanos":491720143},"http":{"id":"ecfb6e9d-e9bf-4133-b3d1-6d7641fe5970","method":"POST","headers":{":authority":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ecfb6e9d-e9bf-4133-b3d1-6d7641fe5970","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ecfb6e9d-e9bf-4133-b3d1-6d7641fe5970","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"]}} {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ecfb6e9d-e9bf-4133-b3d1-6d7641fe5970","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ecfb6e9d-e9bf-4133-b3d1-6d7641fe5970","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ecfb6e9d-e9bf-4133-b3d1-6d7641fe5970","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ecfb6e9d-e9bf-4133-b3d1-6d7641fe5970","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ecfb6e9d-e9bf-4133-b3d1-6d7641fe5970","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ecfb6e9d-e9bf-4133-b3d1-6d7641fe5970","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ecfb6e9d-e9bf-4133-b3d1-6d7641fe5970","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ecfb6e9d-e9bf-4133-b3d1-6d7641fe5970","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ecfb6e9d-e9bf-4133-b3d1-6d7641fe5970","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"efd0ca61-22c9-4f51-85be-177ab85f4905","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:48964","PortSpecifier":{"PortValue":48964}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"efd0ca61-22c9-4f51-85be-177ab85f4905","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"efd0ca61-22c9-4f51-85be-177ab85f4905","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:48964","PortSpecifier":{"PortValue":48964}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021417,"nanos":531182253},"http":{"id":"efd0ca61-22c9-4f51-85be-177ab85f4905","method":"POST","headers":{":authority":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"efd0ca61-22c9-4f51-85be-177ab85f4905","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"efd0ca61-22c9-4f51-85be-177ab85f4905","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"]}} {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"efd0ca61-22c9-4f51-85be-177ab85f4905","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7e6e7de35575"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=60a8cb54-e2a4-45c9-9ffa-9b5a4d49183f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7abf0750-d9ad-42aa-a13b-787ae7e30f9f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c557622291a6f60d739df5301771e2f4b41fdd188c8312c81c6476a9c4ef1d09"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"efd0ca61-22c9-4f51-85be-177ab85f4905","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"efd0ca61-22c9-4f51-85be-177ab85f4905","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"efd0ca61-22c9-4f51-85be-177ab85f4905","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8e566a/rate-test-model-8e566a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"efd0ca61-22c9-4f51-85be-177ab85f4905","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"efd0ca61-22c9-4f51-85be-177ab85f4905","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"efd0ca61-22c9-4f51-85be-177ab85f4905","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"efd0ca61-22c9-4f51-85be-177ab85f4905","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"efd0ca61-22c9-4f51-85be-177ab85f4905","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef8d4145-03d5-4825-b7be-cbe5812c9cff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:40774","PortSpecifier":{"PortValue":40774}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ef8d4145-03d5-4825-b7be-cbe5812c9cff","method":"POST","path":"/ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c/v1/completions","host":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef8d4145-03d5-4825-b7be-cbe5812c9cff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:40774","PortSpecifier":{"PortValue":40774}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021417,"nanos":581051424},"http":{"id":"ef8d4145-03d5-4825-b7be-cbe5812c9cff","method":"POST","headers":{":authority":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ef8d4145-03d5-4825-b7be-cbe5812c9cff","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1LXQMWRnmjTmMfJwf_MuWjv8V6mQLkP97Qw9i3SYFZV3vvuyZI7Dyvzjh4gbw"} {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ef8d4145-03d5-4825-b7be-cbe5812c9cff","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1LXQMWRnmjTmMfJwf_MuWjv8V6mQLkP97Qw9i3SYFZV3vvuyZI7Dyvzjh4gbw\"}"} {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ef8d4145-03d5-4825-b7be-cbe5812c9cff","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"62e43a94-d5ce-47ee-adad-ca807c8de82c","keyName":"e2e-rate-a-706332","subscription":"e2e-rate-iso-a-706332","tenant":"e2e-shared-a-74b95c","userId":"62e43a94-d5ce-47ee-adad-ca807c8de82c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ef8d4145-03d5-4825-b7be-cbe5812c9cff","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c\",\"requestedSubscription\":\"e2e-rate-iso-a-706332\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ef8d4145-03d5-4825-b7be-cbe5812c9cff","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-74b95c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-706332","namespace":"ai-tenant-e2e-shared-a-74b95c","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ef8d4145-03d5-4825-b7be-cbe5812c9cff","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef8d4145-03d5-4825-b7be-cbe5812c9cff","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef8d4145-03d5-4825-b7be-cbe5812c9cff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef8d4145-03d5-4825-b7be-cbe5812c9cff","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef8d4145-03d5-4825-b7be-cbe5812c9cff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef8d4145-03d5-4825-b7be-cbe5812c9cff","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-706332"} {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef8d4145-03d5-4825-b7be-cbe5812c9cff","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef8d4145-03d5-4825-b7be-cbe5812c9cff","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef8d4145-03d5-4825-b7be-cbe5812c9cff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"62e43a94-d5ce-47ee-adad-ca807c8de82c","keyName":"e2e-rate-a-706332","selected_subscription":"e2e-rate-iso-a-706332","selected_subscription_key":"ai-tenant-e2e-shared-a-74b95c/e2e-rate-iso-a-706332@ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-74b95c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-706332","namespace":"ai-tenant-e2e-shared-a-74b95c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef8d4145-03d5-4825-b7be-cbe5812c9cff","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-02T19:43:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef8d4145-03d5-4825-b7be-cbe5812c9cff","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-02T19:43:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48a71dd7-2f93-4cc4-977c-c8bce5bf4f48","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:40784","PortSpecifier":{"PortValue":40784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"48a71dd7-2f93-4cc4-977c-c8bce5bf4f48","method":"POST","path":"/ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c/v1/completions","host":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-02T19:43:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48a71dd7-2f93-4cc4-977c-c8bce5bf4f48","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:40784","PortSpecifier":{"PortValue":40784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021418,"nanos":623299313},"http":{"id":"48a71dd7-2f93-4cc4-977c-c8bce5bf4f48","method":"POST","headers":{":authority":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:43:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"48a71dd7-2f93-4cc4-977c-c8bce5bf4f48","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1LXQMWRnmjTmMfJwf_MuWjv8V6mQLkP97Qw9i3SYFZV3vvuyZI7Dyvzjh4gbw"} {"level":"debug","ts":"2026-07-02T19:43:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"48a71dd7-2f93-4cc4-977c-c8bce5bf4f48","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1LXQMWRnmjTmMfJwf_MuWjv8V6mQLkP97Qw9i3SYFZV3vvuyZI7Dyvzjh4gbw\"}"} {"level":"debug","ts":"2026-07-02T19:43:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"48a71dd7-2f93-4cc4-977c-c8bce5bf4f48","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"62e43a94-d5ce-47ee-adad-ca807c8de82c","keyName":"e2e-rate-a-706332","subscription":"e2e-rate-iso-a-706332","tenant":"e2e-shared-a-74b95c","userId":"62e43a94-d5ce-47ee-adad-ca807c8de82c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-02T19:43:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"48a71dd7-2f93-4cc4-977c-c8bce5bf4f48","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c\",\"requestedSubscription\":\"e2e-rate-iso-a-706332\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-02T19:43:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"48a71dd7-2f93-4cc4-977c-c8bce5bf4f48","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-74b95c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-706332","namespace":"ai-tenant-e2e-shared-a-74b95c","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-02T19:43:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"48a71dd7-2f93-4cc4-977c-c8bce5bf4f48","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:43:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48a71dd7-2f93-4cc4-977c-c8bce5bf4f48","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:43:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48a71dd7-2f93-4cc4-977c-c8bce5bf4f48","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:43:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48a71dd7-2f93-4cc4-977c-c8bce5bf4f48","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:43:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48a71dd7-2f93-4cc4-977c-c8bce5bf4f48","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:43:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48a71dd7-2f93-4cc4-977c-c8bce5bf4f48","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-706332"} {"level":"debug","ts":"2026-07-02T19:43:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48a71dd7-2f93-4cc4-977c-c8bce5bf4f48","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-02T19:43:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48a71dd7-2f93-4cc4-977c-c8bce5bf4f48","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-02T19:43:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48a71dd7-2f93-4cc4-977c-c8bce5bf4f48","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"62e43a94-d5ce-47ee-adad-ca807c8de82c","keyName":"e2e-rate-a-706332","selected_subscription":"e2e-rate-iso-a-706332","selected_subscription_key":"ai-tenant-e2e-shared-a-74b95c/e2e-rate-iso-a-706332@ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-74b95c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-706332","namespace":"ai-tenant-e2e-shared-a-74b95c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-02T19:43:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48a71dd7-2f93-4cc4-977c-c8bce5bf4f48","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-02T19:43:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48a71dd7-2f93-4cc4-977c-c8bce5bf4f48","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"338b3f93-9609-4571-809a-92f26fee1135","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:40796","PortSpecifier":{"PortValue":40796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"338b3f93-9609-4571-809a-92f26fee1135","method":"POST","path":"/ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c/v1/completions","host":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"338b3f93-9609-4571-809a-92f26fee1135","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:40796","PortSpecifier":{"PortValue":40796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021419,"nanos":663963253},"http":{"id":"338b3f93-9609-4571-809a-92f26fee1135","method":"POST","headers":{":authority":"e2e-shared-a-74b95c.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"338b3f93-9609-4571-809a-92f26fee1135","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1LXQMWRnmjTmMfJwf_MuWjv8V6mQLkP97Qw9i3SYFZV3vvuyZI7Dyvzjh4gbw"} {"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"338b3f93-9609-4571-809a-92f26fee1135","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1LXQMWRnmjTmMfJwf_MuWjv8V6mQLkP97Qw9i3SYFZV3vvuyZI7Dyvzjh4gbw\"}"} {"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"338b3f93-9609-4571-809a-92f26fee1135","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"62e43a94-d5ce-47ee-adad-ca807c8de82c","keyName":"e2e-rate-a-706332","subscription":"e2e-rate-iso-a-706332","tenant":"e2e-shared-a-74b95c","userId":"62e43a94-d5ce-47ee-adad-ca807c8de82c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"338b3f93-9609-4571-809a-92f26fee1135","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c\",\"requestedSubscription\":\"e2e-rate-iso-a-706332\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"338b3f93-9609-4571-809a-92f26fee1135","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-74b95c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-74b95c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-706332","namespace":"ai-tenant-e2e-shared-a-74b95c","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"338b3f93-9609-4571-809a-92f26fee1135","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"338b3f93-9609-4571-809a-92f26fee1135","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"338b3f93-9609-4571-809a-92f26fee1135","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"338b3f93-9609-4571-809a-92f26fee1135","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"338b3f93-9609-4571-809a-92f26fee1135","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"338b3f93-9609-4571-809a-92f26fee1135","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"338b3f93-9609-4571-809a-92f26fee1135","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"338b3f93-9609-4571-809a-92f26fee1135","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-706332"} {"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"338b3f93-9609-4571-809a-92f26fee1135","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"62e43a94-d5ce-47ee-adad-ca807c8de82c","keyName":"e2e-rate-a-706332","selected_subscription":"e2e-rate-iso-a-706332","selected_subscription_key":"ai-tenant-e2e-shared-a-74b95c/e2e-rate-iso-a-706332@ai-tenant-e2e-shared-a-74b95c/rate-test-model-74b95c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-74b95c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-706332","namespace":"ai-tenant-e2e-shared-a-74b95c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"338b3f93-9609-4571-809a-92f26fee1135","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"338b3f93-9609-4571-809a-92f26fee1135","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8dfc48e6-9c5a-4998-ae86-1cdcb2dec2aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:48978","PortSpecifier":{"PortValue":48978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8dfc48e6-9c5a-4998-ae86-1cdcb2dec2aa","method":"POST","path":"/ai-tenant-e2e-shared-b-8e566a/rate-test-model-8e566a/v1/completions","host":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8dfc48e6-9c5a-4998-ae86-1cdcb2dec2aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:48978","PortSpecifier":{"PortValue":48978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021419,"nanos":703866939},"http":{"id":"8dfc48e6-9c5a-4998-ae86-1cdcb2dec2aa","method":"POST","headers":{":authority":"e2e-shared-b-8e566a.apps.6944257c-051a-43e2-9fc6-7e6e7de35575.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-8e566a/rate-test-model-8e566a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8dfc48e6-9c5a-4998-ae86-1cdcb2dec2aa","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Sj7tzbG162PaP4xy_8xt3ThQXmtaud0yIqeLvFs7s4igIUsajnwLAHpP7G5Q"} {"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8dfc48e6-9c5a-4998-ae86-1cdcb2dec2aa","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-8e566a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Sj7tzbG162PaP4xy_8xt3ThQXmtaud0yIqeLvFs7s4igIUsajnwLAHpP7G5Q\"}"} {"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8dfc48e6-9c5a-4998-ae86-1cdcb2dec2aa","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-8e566a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d26a96ce-eb7e-430a-b801-f2b1c575be6d","keyName":"e2e-rate-b-706332","subscription":"e2e-rate-iso-b-706332","tenant":"e2e-shared-b-8e566a","userId":"d26a96ce-eb7e-430a-b801-f2b1c575be6d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8dfc48e6-9c5a-4998-ae86-1cdcb2dec2aa","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-8e566a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-8e566a/rate-test-model-8e566a\",\"requestedSubscription\":\"e2e-rate-iso-b-706332\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8dfc48e6-9c5a-4998-ae86-1cdcb2dec2aa","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-8e566a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8e566a","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-706332","namespace":"ai-tenant-e2e-shared-b-8e566a","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8dfc48e6-9c5a-4998-ae86-1cdcb2dec2aa","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8dfc48e6-9c5a-4998-ae86-1cdcb2dec2aa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8dfc48e6-9c5a-4998-ae86-1cdcb2dec2aa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8e566a/rate-test-model-8e566a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8dfc48e6-9c5a-4998-ae86-1cdcb2dec2aa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8dfc48e6-9c5a-4998-ae86-1cdcb2dec2aa","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8dfc48e6-9c5a-4998-ae86-1cdcb2dec2aa","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8dfc48e6-9c5a-4998-ae86-1cdcb2dec2aa","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-706332"} {"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8dfc48e6-9c5a-4998-ae86-1cdcb2dec2aa","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8dfc48e6-9c5a-4998-ae86-1cdcb2dec2aa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d26a96ce-eb7e-430a-b801-f2b1c575be6d","keyName":"e2e-rate-b-706332","selected_subscription":"e2e-rate-iso-b-706332","selected_subscription_key":"ai-tenant-e2e-shared-b-8e566a/e2e-rate-iso-b-706332@ai-tenant-e2e-shared-b-8e566a/rate-test-model-8e566a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8e566a","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-706332","namespace":"ai-tenant-e2e-shared-b-8e566a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8dfc48e6-9c5a-4998-ae86-1cdcb2dec2aa","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-02T19:43:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8dfc48e6-9c5a-4998-ae86-1cdcb2dec2aa","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-02T19:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/874aa2e5cd9d0df9909f8df1b2ceb5cc34ce1817dcffda3b4535a1b8ceb90c2a"} {"level":"info","ts":"2026-07-02T19:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e85a47a1ca462ce8633acdfa8f2d9f8620a635efea8b88209c123b8f38157913"} {"level":"info","ts":"2026-07-02T19:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/08bef13984dd5b2db77599cf13808bbe0d45fd639e73de0f7e44ab6a87ccfc61"} {"level":"info","ts":"2026-07-02T19:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/144097e2e1569275aef0b74f430bf08062bf8abf98602b2309e263ec8c17ba32"} {"level":"info","ts":"2026-07-02T19:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb3398038cc27de388f85b11fff082bda4939a8707690cb8fb1177ad94a06de2"} {"level":"info","ts":"2026-07-02T19:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c8b16b10a881a22414be5649037dc20f792a1905e33c281a7cf5c05775df0af"} {"level":"info","ts":"2026-07-02T19:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c3751a22f24055ffbec63a09239d6eced8ec1a3e3ddd5bf765f4c37cd753e115"} {"level":"info","ts":"2026-07-02T19:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/098d1a7ce8721750f14589b7a5b8299be55e358217725f05e4003d1b457e702f"} {"level":"info","ts":"2026-07-02T19:43:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9774520c9f1f0f0e43d8330755488cde1c156d20923f412beac56429adc45e7a"} {"level":"info","ts":"2026-07-02T19:43:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b689bdee41c322d0da156dbb24fef606e16d1421d83bc4f303e342580383d921"} {"level":"info","ts":"2026-07-02T19:43:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb7ba02f9761e113c122eb14d46b2a3e1178838e1794cfa2b2f362cce27f8abd"} {"level":"info","ts":"2026-07-02T19:43:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9a8a54288e54f71905d29f9ec90a254a7f5d04449513208b4ee79ce4c707492e"} {"level":"info","ts":"2026-07-02T19:43:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a8ee81517365a92d4fc0523a8f86a765667b18b7272d4a857c51f5b6b81764c"} {"level":"info","ts":"2026-07-02T19:43:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1521b02449e2844ed7255bb3974d05a17d4ba3d5d9993ce190be84f2c3b875d6"} {"level":"info","ts":"2026-07-02T19:43:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c342c64134031326c9cfbc2b5f1f3a2b12d9ac24ea03d44ea908a4c0b521947f"} {"level":"info","ts":"2026-07-02T19:43:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da813e4696d0d0ec0a764dee4bb1be55fd025f81e5e8717625ed6ea12a9c8e54"} {"level":"info","ts":"2026-07-02T19:43:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6168701e1b0602b5427307b31a589c1df2dac63153ca5a3dba0a468a78e99de"} {"level":"info","ts":"2026-07-02T19:43:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d07741af706c0487a2c0da30992dde42499941a401459bf315cee6ff29fc6e3c"} {"level":"info","ts":"2026-07-02T19:44:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a1492035373c1194ed017f175174ad0a63fe2ac73467ef498e9c69b3962dc99"} {"level":"info","ts":"2026-07-02T19:44:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c557622291a6f60d739df5301771e2f4b41fdd188c8312c81c6476a9c4ef1d09"}