--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83c8ecfe3b0c132964f3bccfc244259776fc062a97e0c86d0f6b8b60ac4cd8e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83c8ecfe3b0c132964f3bccfc244259776fc062a97e0c86d0f6b8b60ac4cd8e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83c8ecfe3b0c132964f3bccfc244259776fc062a97e0c86d0f6b8b60ac4cd8e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83c8ecfe3b0c132964f3bccfc244259776fc062a97e0c86d0f6b8b60ac4cd8e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83c8ecfe3b0c132964f3bccfc244259776fc062a97e0c86d0f6b8b60ac4cd8e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83c8ecfe3b0c132964f3bccfc244259776fc062a97e0c86d0f6b8b60ac4cd8e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83c8ecfe3b0c132964f3bccfc244259776fc062a97e0c86d0f6b8b60ac4cd8e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83c8ecfe3b0c132964f3bccfc244259776fc062a97e0c86d0f6b8b60ac4cd8e7"}
{"level":"debug","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83c8ecfe3b0c132964f3bccfc244259776fc062a97e0c86d0f6b8b60ac4cd8e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83c8ecfe3b0c132964f3bccfc244259776fc062a97e0c86d0f6b8b60ac4cd8e7"}
{"level":"debug","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83c8ecfe3b0c132964f3bccfc244259776fc062a97e0c86d0f6b8b60ac4cd8e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83c8ecfe3b0c132964f3bccfc244259776fc062a97e0c86d0f6b8b60ac4cd8e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83c8ecfe3b0c132964f3bccfc244259776fc062a97e0c86d0f6b8b60ac4cd8e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83c8ecfe3b0c132964f3bccfc244259776fc062a97e0c86d0f6b8b60ac4cd8e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83c8ecfe3b0c132964f3bccfc244259776fc062a97e0c86d0f6b8b60ac4cd8e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83c8ecfe3b0c132964f3bccfc244259776fc062a97e0c86d0f6b8b60ac4cd8e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83c8ecfe3b0c132964f3bccfc244259776fc062a97e0c86d0f6b8b60ac4cd8e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83c8ecfe3b0c132964f3bccfc244259776fc062a97e0c86d0f6b8b60ac4cd8e7"}
{"level":"debug","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83c8ecfe3b0c132964f3bccfc244259776fc062a97e0c86d0f6b8b60ac4cd8e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83c8ecfe3b0c132964f3bccfc244259776fc062a97e0c86d0f6b8b60ac4cd8e7"}
{"level":"debug","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83c8ecfe3b0c132964f3bccfc244259776fc062a97e0c86d0f6b8b60ac4cd8e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83c8ecfe3b0c132964f3bccfc244259776fc062a97e0c86d0f6b8b60ac4cd8e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83c8ecfe3b0c132964f3bccfc244259776fc062a97e0c86d0f6b8b60ac4cd8e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83c8ecfe3b0c132964f3bccfc244259776fc062a97e0c86d0f6b8b60ac4cd8e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83c8ecfe3b0c132964f3bccfc244259776fc062a97e0c86d0f6b8b60ac4cd8e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83c8ecfe3b0c132964f3bccfc244259776fc062a97e0c86d0f6b8b60ac4cd8e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83c8ecfe3b0c132964f3bccfc244259776fc062a97e0c86d0f6b8b60ac4cd8e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83c8ecfe3b0c132964f3bccfc244259776fc062a97e0c86d0f6b8b60ac4cd8e7"}
{"level":"debug","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83c8ecfe3b0c132964f3bccfc244259776fc062a97e0c86d0f6b8b60ac4cd8e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83c8ecfe3b0c132964f3bccfc244259776fc062a97e0c86d0f6b8b60ac4cd8e7"}
{"level":"debug","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83c8ecfe3b0c132964f3bccfc244259776fc062a97e0c86d0f6b8b60ac4cd8e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83c8ecfe3b0c132964f3bccfc244259776fc062a97e0c86d0f6b8b60ac4cd8e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83c8ecfe3b0c132964f3bccfc244259776fc062a97e0c86d0f6b8b60ac4cd8e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83c8ecfe3b0c132964f3bccfc244259776fc062a97e0c86d0f6b8b60ac4cd8e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83c8ecfe3b0c132964f3bccfc244259776fc062a97e0c86d0f6b8b60ac4cd8e7"}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"080a29703654ff189f0e82c0d6f37aa1cbd434e6a90b89957770d94c6ee52f84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"080a29703654ff189f0e82c0d6f37aa1cbd434e6a90b89957770d94c6ee52f84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"080a29703654ff189f0e82c0d6f37aa1cbd434e6a90b89957770d94c6ee52f84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"080a29703654ff189f0e82c0d6f37aa1cbd434e6a90b89957770d94c6ee52f84","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/080a29703654ff189f0e82c0d6f37aa1cbd434e6a90b89957770d94c6ee52f84"}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"080a29703654ff189f0e82c0d6f37aa1cbd434e6a90b89957770d94c6ee52f84","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/080a29703654ff189f0e82c0d6f37aa1cbd434e6a90b89957770d94c6ee52f84"}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"080a29703654ff189f0e82c0d6f37aa1cbd434e6a90b89957770d94c6ee52f84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["080a29703654ff189f0e82c0d6f37aa1cbd434e6a90b89957770d94c6ee52f84"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"080a29703654ff189f0e82c0d6f37aa1cbd434e6a90b89957770d94c6ee52f84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cea6b222800a9e1016138f3d61be30d4a9be0c6d1b03e01456575d62ed3ce851","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cea6b222800a9e1016138f3d61be30d4a9be0c6d1b03e01456575d62ed3ce851","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"080a29703654ff189f0e82c0d6f37aa1cbd434e6a90b89957770d94c6ee52f84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cea6b222800a9e1016138f3d61be30d4a9be0c6d1b03e01456575d62ed3ce851","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cea6b222800a9e1016138f3d61be30d4a9be0c6d1b03e01456575d62ed3ce851","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cea6b222800a9e1016138f3d61be30d4a9be0c6d1b03e01456575d62ed3ce851"}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cea6b222800a9e1016138f3d61be30d4a9be0c6d1b03e01456575d62ed3ce851","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cea6b222800a9e1016138f3d61be30d4a9be0c6d1b03e01456575d62ed3ce851"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/080a29703654ff189f0e82c0d6f37aa1cbd434e6a90b89957770d94c6ee52f84"}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cea6b222800a9e1016138f3d61be30d4a9be0c6d1b03e01456575d62ed3ce851","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cea6b222800a9e1016138f3d61be30d4a9be0c6d1b03e01456575d62ed3ce851","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cea6b222800a9e1016138f3d61be30d4a9be0c6d1b03e01456575d62ed3ce851"}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cea6b222800a9e1016138f3d61be30d4a9be0c6d1b03e01456575d62ed3ce851","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cea6b222800a9e1016138f3d61be30d4a9be0c6d1b03e01456575d62ed3ce851","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cea6b222800a9e1016138f3d61be30d4a9be0c6d1b03e01456575d62ed3ce851","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cea6b222800a9e1016138f3d61be30d4a9be0c6d1b03e01456575d62ed3ce851"}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cea6b222800a9e1016138f3d61be30d4a9be0c6d1b03e01456575d62ed3ce851","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9c35929d56e01e3434af145def9d10be77c1af7de6b1acc3fbb39dbf5268006","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cea6b222800a9e1016138f3d61be30d4a9be0c6d1b03e01456575d62ed3ce851"}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9c35929d56e01e3434af145def9d10be77c1af7de6b1acc3fbb39dbf5268006","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9c35929d56e01e3434af145def9d10be77c1af7de6b1acc3fbb39dbf5268006","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9c35929d56e01e3434af145def9d10be77c1af7de6b1acc3fbb39dbf5268006","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9c35929d56e01e3434af145def9d10be77c1af7de6b1acc3fbb39dbf5268006","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9c35929d56e01e3434af145def9d10be77c1af7de6b1acc3fbb39dbf5268006"}
{"level":"error","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c9c35929d56e01e3434af145def9d10be77c1af7de6b1acc3fbb39dbf5268006","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c9c35929d56e01e3434af145def9d10be77c1af7de6b1acc3fbb39dbf5268006\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9c35929d56e01e3434af145def9d10be77c1af7de6b1acc3fbb39dbf5268006","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cea6b222800a9e1016138f3d61be30d4a9be0c6d1b03e01456575d62ed3ce851","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cea6b222800a9e1016138f3d61be30d4a9be0c6d1b03e01456575d62ed3ce851"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9c35929d56e01e3434af145def9d10be77c1af7de6b1acc3fbb39dbf5268006"}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cea6b222800a9e1016138f3d61be30d4a9be0c6d1b03e01456575d62ed3ce851","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9c35929d56e01e3434af145def9d10be77c1af7de6b1acc3fbb39dbf5268006","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9c35929d56e01e3434af145def9d10be77c1af7de6b1acc3fbb39dbf5268006"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9c35929d56e01e3434af145def9d10be77c1af7de6b1acc3fbb39dbf5268006","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cea6b222800a9e1016138f3d61be30d4a9be0c6d1b03e01456575d62ed3ce851","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cea6b222800a9e1016138f3d61be30d4a9be0c6d1b03e01456575d62ed3ce851"}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cea6b222800a9e1016138f3d61be30d4a9be0c6d1b03e01456575d62ed3ce851","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9c35929d56e01e3434af145def9d10be77c1af7de6b1acc3fbb39dbf5268006","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9c35929d56e01e3434af145def9d10be77c1af7de6b1acc3fbb39dbf5268006","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cea6b222800a9e1016138f3d61be30d4a9be0c6d1b03e01456575d62ed3ce851","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cea6b222800a9e1016138f3d61be30d4a9be0c6d1b03e01456575d62ed3ce851"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9c35929d56e01e3434af145def9d10be77c1af7de6b1acc3fbb39dbf5268006"}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cea6b222800a9e1016138f3d61be30d4a9be0c6d1b03e01456575d62ed3ce851","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b52e4c3f6cd049c6dd50325f0d63d59627b8027fa3546c9f6483d1fecf06875","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cea6b222800a9e1016138f3d61be30d4a9be0c6d1b03e01456575d62ed3ce851"}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b52e4c3f6cd049c6dd50325f0d63d59627b8027fa3546c9f6483d1fecf06875","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9c35929d56e01e3434af145def9d10be77c1af7de6b1acc3fbb39dbf5268006","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9c35929d56e01e3434af145def9d10be77c1af7de6b1acc3fbb39dbf5268006"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9c35929d56e01e3434af145def9d10be77c1af7de6b1acc3fbb39dbf5268006","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cea6b222800a9e1016138f3d61be30d4a9be0c6d1b03e01456575d62ed3ce851","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b52e4c3f6cd049c6dd50325f0d63d59627b8027fa3546c9f6483d1fecf06875","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b52e4c3f6cd049c6dd50325f0d63d59627b8027fa3546c9f6483d1fecf06875"}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b52e4c3f6cd049c6dd50325f0d63d59627b8027fa3546c9f6483d1fecf06875","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9c35929d56e01e3434af145def9d10be77c1af7de6b1acc3fbb39dbf5268006","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9c35929d56e01e3434af145def9d10be77c1af7de6b1acc3fbb39dbf5268006"}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9c35929d56e01e3434af145def9d10be77c1af7de6b1acc3fbb39dbf5268006","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b52e4c3f6cd049c6dd50325f0d63d59627b8027fa3546c9f6483d1fecf06875","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b52e4c3f6cd049c6dd50325f0d63d59627b8027fa3546c9f6483d1fecf06875"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b52e4c3f6cd049c6dd50325f0d63d59627b8027fa3546c9f6483d1fecf06875","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9c35929d56e01e3434af145def9d10be77c1af7de6b1acc3fbb39dbf5268006","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9c35929d56e01e3434af145def9d10be77c1af7de6b1acc3fbb39dbf5268006"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cea6b222800a9e1016138f3d61be30d4a9be0c6d1b03e01456575d62ed3ce851"}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9c35929d56e01e3434af145def9d10be77c1af7de6b1acc3fbb39dbf5268006","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b52e4c3f6cd049c6dd50325f0d63d59627b8027fa3546c9f6483d1fecf06875","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b52e4c3f6cd049c6dd50325f0d63d59627b8027fa3546c9f6483d1fecf06875","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9c35929d56e01e3434af145def9d10be77c1af7de6b1acc3fbb39dbf5268006","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b52e4c3f6cd049c6dd50325f0d63d59627b8027fa3546c9f6483d1fecf06875"}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b52e4c3f6cd049c6dd50325f0d63d59627b8027fa3546c9f6483d1fecf06875","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b52e4c3f6cd049c6dd50325f0d63d59627b8027fa3546c9f6483d1fecf06875"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b52e4c3f6cd049c6dd50325f0d63d59627b8027fa3546c9f6483d1fecf06875","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b52e4c3f6cd049c6dd50325f0d63d59627b8027fa3546c9f6483d1fecf06875","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b52e4c3f6cd049c6dd50325f0d63d59627b8027fa3546c9f6483d1fecf06875"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1b52e4c3f6cd049c6dd50325f0d63d59627b8027fa3546c9f6483d1fecf06875","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1b52e4c3f6cd049c6dd50325f0d63d59627b8027fa3546c9f6483d1fecf06875\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b52e4c3f6cd049c6dd50325f0d63d59627b8027fa3546c9f6483d1fecf06875","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9c35929d56e01e3434af145def9d10be77c1af7de6b1acc3fbb39dbf5268006"}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b52e4c3f6cd049c6dd50325f0d63d59627b8027fa3546c9f6483d1fecf06875","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b52e4c3f6cd049c6dd50325f0d63d59627b8027fa3546c9f6483d1fecf06875","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b52e4c3f6cd049c6dd50325f0d63d59627b8027fa3546c9f6483d1fecf06875","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b52e4c3f6cd049c6dd50325f0d63d59627b8027fa3546c9f6483d1fecf06875"}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b52e4c3f6cd049c6dd50325f0d63d59627b8027fa3546c9f6483d1fecf06875","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b52e4c3f6cd049c6dd50325f0d63d59627b8027fa3546c9f6483d1fecf06875","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b52e4c3f6cd049c6dd50325f0d63d59627b8027fa3546c9f6483d1fecf06875"}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52a712293eb545685641a66e2a807687f6b105a153d9244c30d72fdac7c2fb53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52a712293eb545685641a66e2a807687f6b105a153d9244c30d72fdac7c2fb53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52a712293eb545685641a66e2a807687f6b105a153d9244c30d72fdac7c2fb53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52a712293eb545685641a66e2a807687f6b105a153d9244c30d72fdac7c2fb53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52a712293eb545685641a66e2a807687f6b105a153d9244c30d72fdac7c2fb53"}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b52e4c3f6cd049c6dd50325f0d63d59627b8027fa3546c9f6483d1fecf06875","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b52e4c3f6cd049c6dd50325f0d63d59627b8027fa3546c9f6483d1fecf06875"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52a712293eb545685641a66e2a807687f6b105a153d9244c30d72fdac7c2fb53"}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b52e4c3f6cd049c6dd50325f0d63d59627b8027fa3546c9f6483d1fecf06875","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52a712293eb545685641a66e2a807687f6b105a153d9244c30d72fdac7c2fb53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52a712293eb545685641a66e2a807687f6b105a153d9244c30d72fdac7c2fb53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52a712293eb545685641a66e2a807687f6b105a153d9244c30d72fdac7c2fb53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b52e4c3f6cd049c6dd50325f0d63d59627b8027fa3546c9f6483d1fecf06875","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b52e4c3f6cd049c6dd50325f0d63d59627b8027fa3546c9f6483d1fecf06875"}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b52e4c3f6cd049c6dd50325f0d63d59627b8027fa3546c9f6483d1fecf06875","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52a712293eb545685641a66e2a807687f6b105a153d9244c30d72fdac7c2fb53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52a712293eb545685641a66e2a807687f6b105a153d9244c30d72fdac7c2fb53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b52e4c3f6cd049c6dd50325f0d63d59627b8027fa3546c9f6483d1fecf06875","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b52e4c3f6cd049c6dd50325f0d63d59627b8027fa3546c9f6483d1fecf06875"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52a712293eb545685641a66e2a807687f6b105a153d9244c30d72fdac7c2fb53"}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b52e4c3f6cd049c6dd50325f0d63d59627b8027fa3546c9f6483d1fecf06875","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52a712293eb545685641a66e2a807687f6b105a153d9244c30d72fdac7c2fb53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52a712293eb545685641a66e2a807687f6b105a153d9244c30d72fdac7c2fb53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b52e4c3f6cd049c6dd50325f0d63d59627b8027fa3546c9f6483d1fecf06875"}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52a712293eb545685641a66e2a807687f6b105a153d9244c30d72fdac7c2fb53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2666e13b7f0d0cd649d6bd28e795e8937662c0c09eae27a807ffc48092f213f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2666e13b7f0d0cd649d6bd28e795e8937662c0c09eae27a807ffc48092f213f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b52e4c3f6cd049c6dd50325f0d63d59627b8027fa3546c9f6483d1fecf06875","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eccc3c46acec289c2f6a02f1e70d7264d21bbe9e4bd8ffbac055d9c30ef9b56d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52a712293eb545685641a66e2a807687f6b105a153d9244c30d72fdac7c2fb53"}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eccc3c46acec289c2f6a02f1e70d7264d21bbe9e4bd8ffbac055d9c30ef9b56d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52a712293eb545685641a66e2a807687f6b105a153d9244c30d72fdac7c2fb53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2666e13b7f0d0cd649d6bd28e795e8937662c0c09eae27a807ffc48092f213f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2666e13b7f0d0cd649d6bd28e795e8937662c0c09eae27a807ffc48092f213f"}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2666e13b7f0d0cd649d6bd28e795e8937662c0c09eae27a807ffc48092f213f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eccc3c46acec289c2f6a02f1e70d7264d21bbe9e4bd8ffbac055d9c30ef9b56d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eccc3c46acec289c2f6a02f1e70d7264d21bbe9e4bd8ffbac055d9c30ef9b56d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2666e13b7f0d0cd649d6bd28e795e8937662c0c09eae27a807ffc48092f213f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2666e13b7f0d0cd649d6bd28e795e8937662c0c09eae27a807ffc48092f213f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eccc3c46acec289c2f6a02f1e70d7264d21bbe9e4bd8ffbac055d9c30ef9b56d"}
{"level":"info","ts":"2026-07-07T00:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2666e13b7f0d0cd649d6bd28e795e8937662c0c09eae27a807ffc48092f213f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eccc3c46acec289c2f6a02f1e70d7264d21bbe9e4bd8ffbac055d9c30ef9b56d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eccc3c46acec289c2f6a02f1e70d7264d21bbe9e4bd8ffbac055d9c30ef9b56d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b52e4c3f6cd049c6dd50325f0d63d59627b8027fa3546c9f6483d1fecf06875"}
{"level":"info","ts":"2026-07-07T00:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eccc3c46acec289c2f6a02f1e70d7264d21bbe9e4bd8ffbac055d9c30ef9b56d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2666e13b7f0d0cd649d6bd28e795e8937662c0c09eae27a807ffc48092f213f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5867ddd8ecf237e1049f06caf0f6092fbf6fab6fac91fd1fdad8d2536be59ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5867ddd8ecf237e1049f06caf0f6092fbf6fab6fac91fd1fdad8d2536be59ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eccc3c46acec289c2f6a02f1e70d7264d21bbe9e4bd8ffbac055d9c30ef9b56d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6baeaf8e016fea95b3e2e3a383b75678f783365ccc5a4b62f9b05372d2889004","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52a712293eb545685641a66e2a807687f6b105a153d9244c30d72fdac7c2fb53"}
{"level":"info","ts":"2026-07-07T00:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6baeaf8e016fea95b3e2e3a383b75678f783365ccc5a4b62f9b05372d2889004","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5867ddd8ecf237e1049f06caf0f6092fbf6fab6fac91fd1fdad8d2536be59ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6baeaf8e016fea95b3e2e3a383b75678f783365ccc5a4b62f9b05372d2889004","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6baeaf8e016fea95b3e2e3a383b75678f783365ccc5a4b62f9b05372d2889004","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5867ddd8ecf237e1049f06caf0f6092fbf6fab6fac91fd1fdad8d2536be59ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2666e13b7f0d0cd649d6bd28e795e8937662c0c09eae27a807ffc48092f213f"}
{"level":"debug","ts":"2026-07-07T00:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6baeaf8e016fea95b3e2e3a383b75678f783365ccc5a4b62f9b05372d2889004","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5867ddd8ecf237e1049f06caf0f6092fbf6fab6fac91fd1fdad8d2536be59ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6baeaf8e016fea95b3e2e3a383b75678f783365ccc5a4b62f9b05372d2889004","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5867ddd8ecf237e1049f06caf0f6092fbf6fab6fac91fd1fdad8d2536be59ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eccc3c46acec289c2f6a02f1e70d7264d21bbe9e4bd8ffbac055d9c30ef9b56d"}
{"level":"info","ts":"2026-07-07T00:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5867ddd8ecf237e1049f06caf0f6092fbf6fab6fac91fd1fdad8d2536be59ab"}
{"level":"info","ts":"2026-07-07T00:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6baeaf8e016fea95b3e2e3a383b75678f783365ccc5a4b62f9b05372d2889004"}
{"level":"debug","ts":"2026-07-07T00:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6baeaf8e016fea95b3e2e3a383b75678f783365ccc5a4b62f9b05372d2889004","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6baeaf8e016fea95b3e2e3a383b75678f783365ccc5a4b62f9b05372d2889004"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6baeaf8e016fea95b3e2e3a383b75678f783365ccc5a4b62f9b05372d2889004","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5867ddd8ecf237e1049f06caf0f6092fbf6fab6fac91fd1fdad8d2536be59ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5867ddd8ecf237e1049f06caf0f6092fbf6fab6fac91fd1fdad8d2536be59ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5867ddd8ecf237e1049f06caf0f6092fbf6fab6fac91fd1fdad8d2536be59ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6baeaf8e016fea95b3e2e3a383b75678f783365ccc5a4b62f9b05372d2889004","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6baeaf8e016fea95b3e2e3a383b75678f783365ccc5a4b62f9b05372d2889004"}
{"level":"info","ts":"2026-07-07T00:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6baeaf8e016fea95b3e2e3a383b75678f783365ccc5a4b62f9b05372d2889004","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5867ddd8ecf237e1049f06caf0f6092fbf6fab6fac91fd1fdad8d2536be59ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5867ddd8ecf237e1049f06caf0f6092fbf6fab6fac91fd1fdad8d2536be59ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6baeaf8e016fea95b3e2e3a383b75678f783365ccc5a4b62f9b05372d2889004","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6baeaf8e016fea95b3e2e3a383b75678f783365ccc5a4b62f9b05372d2889004"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5867ddd8ecf237e1049f06caf0f6092fbf6fab6fac91fd1fdad8d2536be59ab"}
{"level":"info","ts":"2026-07-07T00:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6baeaf8e016fea95b3e2e3a383b75678f783365ccc5a4b62f9b05372d2889004","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5867ddd8ecf237e1049f06caf0f6092fbf6fab6fac91fd1fdad8d2536be59ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5867ddd8ecf237e1049f06caf0f6092fbf6fab6fac91fd1fdad8d2536be59ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6baeaf8e016fea95b3e2e3a383b75678f783365ccc5a4b62f9b05372d2889004"}
{"level":"info","ts":"2026-07-07T00:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5867ddd8ecf237e1049f06caf0f6092fbf6fab6fac91fd1fdad8d2536be59ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6baeaf8e016fea95b3e2e3a383b75678f783365ccc5a4b62f9b05372d2889004","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5867ddd8ecf237e1049f06caf0f6092fbf6fab6fac91fd1fdad8d2536be59ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5867ddd8ecf237e1049f06caf0f6092fbf6fab6fac91fd1fdad8d2536be59ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5867ddd8ecf237e1049f06caf0f6092fbf6fab6fac91fd1fdad8d2536be59ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5867ddd8ecf237e1049f06caf0f6092fbf6fab6fac91fd1fdad8d2536be59ab"}
{"level":"debug","ts":"2026-07-07T00:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5867ddd8ecf237e1049f06caf0f6092fbf6fab6fac91fd1fdad8d2536be59ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5867ddd8ecf237e1049f06caf0f6092fbf6fab6fac91fd1fdad8d2536be59ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5867ddd8ecf237e1049f06caf0f6092fbf6fab6fac91fd1fdad8d2536be59ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5867ddd8ecf237e1049f06caf0f6092fbf6fab6fac91fd1fdad8d2536be59ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6baeaf8e016fea95b3e2e3a383b75678f783365ccc5a4b62f9b05372d2889004"}
{"level":"info","ts":"2026-07-07T00:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5867ddd8ecf237e1049f06caf0f6092fbf6fab6fac91fd1fdad8d2536be59ab"}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4a3e93d-4142-4c31-91bc-7388c4bb7933","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:38142","PortSpecifier":{"PortValue":38142}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a4a3e93d-4142-4c31-91bc-7388c4bb7933","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4a3e93d-4142-4c31-91bc-7388c4bb7933","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:38142","PortSpecifier":{"PortValue":38142}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384205,"nanos":851168403},"http":{"id":"a4a3e93d-4142-4c31-91bc-7388c4bb7933","method":"POST","headers":{":authority":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a4a3e93d-4142-4c31-91bc-7388c4bb7933","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a4a3e93d-4142-4c31-91bc-7388c4bb7933","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fc8ccae5-ddad-4710-accf-0400aa73fe84","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=86b40590-6f47-4ced-9711-8d70b9b7e4f0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/04fabe1aadfa"]}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a4a3e93d-4142-4c31-91bc-7388c4bb7933","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/04fabe1aadfa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86b40590-6f47-4ced-9711-8d70b9b7e4f0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fc8ccae5-ddad-4710-accf-0400aa73fe84","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"481ae7f3dbcaf0fae9117afd6641ee726b2fff3431da674eed1e01e95dbaab7a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4a3e93d-4142-4c31-91bc-7388c4bb7933","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4a3e93d-4142-4c31-91bc-7388c4bb7933","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4a3e93d-4142-4c31-91bc-7388c4bb7933","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5f1a0/auth-test-model-f5f1a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a4a3e93d-4142-4c31-91bc-7388c4bb7933","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4a3e93d-4142-4c31-91bc-7388c4bb7933","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4a3e93d-4142-4c31-91bc-7388c4bb7933","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4a3e93d-4142-4c31-91bc-7388c4bb7933","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4a3e93d-4142-4c31-91bc-7388c4bb7933","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"084bfe2b-04b5-419f-9f22-97cdcfe856ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:47952","PortSpecifier":{"PortValue":47952}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"084bfe2b-04b5-419f-9f22-97cdcfe856ca","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ead650.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"084bfe2b-04b5-419f-9f22-97cdcfe856ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:47952","PortSpecifier":{"PortValue":47952}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384205,"nanos":905352209},"http":{"id":"084bfe2b-04b5-419f-9f22-97cdcfe856ca","method":"POST","headers":{":authority":"e2e-shared-b-ead650.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"084bfe2b-04b5-419f-9f22-97cdcfe856ca","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"084bfe2b-04b5-419f-9f22-97cdcfe856ca","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fc8ccae5-ddad-4710-accf-0400aa73fe84","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=86b40590-6f47-4ced-9711-8d70b9b7e4f0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/04fabe1aadfa"]}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"084bfe2b-04b5-419f-9f22-97cdcfe856ca","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/04fabe1aadfa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86b40590-6f47-4ced-9711-8d70b9b7e4f0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fc8ccae5-ddad-4710-accf-0400aa73fe84","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5867ddd8ecf237e1049f06caf0f6092fbf6fab6fac91fd1fdad8d2536be59ab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ead650.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"084bfe2b-04b5-419f-9f22-97cdcfe856ca","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"084bfe2b-04b5-419f-9f22-97cdcfe856ca","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"084bfe2b-04b5-419f-9f22-97cdcfe856ca","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ead650/auth-test-model-ead650\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"084bfe2b-04b5-419f-9f22-97cdcfe856ca","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"084bfe2b-04b5-419f-9f22-97cdcfe856ca","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"084bfe2b-04b5-419f-9f22-97cdcfe856ca","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"084bfe2b-04b5-419f-9f22-97cdcfe856ca","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"084bfe2b-04b5-419f-9f22-97cdcfe856ca","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3799e7c4-4241-4c52-8d23-ef23b26e8fd3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:38158","PortSpecifier":{"PortValue":38158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3799e7c4-4241-4c52-8d23-ef23b26e8fd3","method":"GET","path":"/maas-api/v1/api-keys/2cb08be9-954a-4cca-a0de-0720795d3f1c","host":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3799e7c4-4241-4c52-8d23-ef23b26e8fd3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:38158","PortSpecifier":{"PortValue":38158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384205,"nanos":981536088},"http":{"id":"3799e7c4-4241-4c52-8d23-ef23b26e8fd3","method":"GET","headers":{":authority":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/2cb08be9-954a-4cca-a0de-0720795d3f1c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3799e7c4-4241-4c52-8d23-ef23b26e8fd3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3799e7c4-4241-4c52-8d23-ef23b26e8fd3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fc8ccae5-ddad-4710-accf-0400aa73fe84","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=86b40590-6f47-4ced-9711-8d70b9b7e4f0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/04fabe1aadfa"]}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3799e7c4-4241-4c52-8d23-ef23b26e8fd3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/04fabe1aadfa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86b40590-6f47-4ced-9711-8d70b9b7e4f0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fc8ccae5-ddad-4710-accf-0400aa73fe84","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"481ae7f3dbcaf0fae9117afd6641ee726b2fff3431da674eed1e01e95dbaab7a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/2cb08be9-954a-4cca-a0de-0720795d3f1c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3799e7c4-4241-4c52-8d23-ef23b26e8fd3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3799e7c4-4241-4c52-8d23-ef23b26e8fd3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3799e7c4-4241-4c52-8d23-ef23b26e8fd3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5f1a0/auth-test-model-f5f1a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3799e7c4-4241-4c52-8d23-ef23b26e8fd3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3799e7c4-4241-4c52-8d23-ef23b26e8fd3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3799e7c4-4241-4c52-8d23-ef23b26e8fd3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3799e7c4-4241-4c52-8d23-ef23b26e8fd3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3799e7c4-4241-4c52-8d23-ef23b26e8fd3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:30:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a4d55e7-84b0-4a84-9dd8-f6063574db7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:47968","PortSpecifier":{"PortValue":47968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3a4d55e7-84b0-4a84-9dd8-f6063574db7a","method":"GET","path":"/maas-api/v1/api-keys/4c1dc994-d0a6-4d38-b787-70960c660658","host":"e2e-shared-b-ead650.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:30:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a4d55e7-84b0-4a84-9dd8-f6063574db7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:47968","PortSpecifier":{"PortValue":47968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384206,"nanos":15880472},"http":{"id":"3a4d55e7-84b0-4a84-9dd8-f6063574db7a","method":"GET","headers":{":authority":"e2e-shared-b-ead650.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/4c1dc994-d0a6-4d38-b787-70960c660658",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:30:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3a4d55e7-84b0-4a84-9dd8-f6063574db7a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:30:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3a4d55e7-84b0-4a84-9dd8-f6063574db7a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fc8ccae5-ddad-4710-accf-0400aa73fe84","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=86b40590-6f47-4ced-9711-8d70b9b7e4f0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/04fabe1aadfa"]}}
{"level":"debug","ts":"2026-07-07T00:30:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3a4d55e7-84b0-4a84-9dd8-f6063574db7a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/04fabe1aadfa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86b40590-6f47-4ced-9711-8d70b9b7e4f0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fc8ccae5-ddad-4710-accf-0400aa73fe84","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5867ddd8ecf237e1049f06caf0f6092fbf6fab6fac91fd1fdad8d2536be59ab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ead650.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/4c1dc994-d0a6-4d38-b787-70960c660658",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:30:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a4d55e7-84b0-4a84-9dd8-f6063574db7a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a4d55e7-84b0-4a84-9dd8-f6063574db7a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a4d55e7-84b0-4a84-9dd8-f6063574db7a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ead650/auth-test-model-ead650\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3a4d55e7-84b0-4a84-9dd8-f6063574db7a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:30:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a4d55e7-84b0-4a84-9dd8-f6063574db7a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:30:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a4d55e7-84b0-4a84-9dd8-f6063574db7a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T00:30:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a4d55e7-84b0-4a84-9dd8-f6063574db7a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:30:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a4d55e7-84b0-4a84-9dd8-f6063574db7a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:30:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"67b9b5ba-892a-4b4e-bfcb-10cd7292f753","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:43392","PortSpecifier":{"PortValue":43392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"67b9b5ba-892a-4b4e-bfcb-10cd7292f753","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:30:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"67b9b5ba-892a-4b4e-bfcb-10cd7292f753","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:43392","PortSpecifier":{"PortValue":43392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384224,"nanos":21332026},"http":{"id":"67b9b5ba-892a-4b4e-bfcb-10cd7292f753","method":"POST","headers":{":authority":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:30:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"67b9b5ba-892a-4b4e-bfcb-10cd7292f753","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:30:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"67b9b5ba-892a-4b4e-bfcb-10cd7292f753","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fc8ccae5-ddad-4710-accf-0400aa73fe84","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=86b40590-6f47-4ced-9711-8d70b9b7e4f0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/04fabe1aadfa"]}}
{"level":"debug","ts":"2026-07-07T00:30:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"67b9b5ba-892a-4b4e-bfcb-10cd7292f753","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/04fabe1aadfa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86b40590-6f47-4ced-9711-8d70b9b7e4f0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fc8ccae5-ddad-4710-accf-0400aa73fe84","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"481ae7f3dbcaf0fae9117afd6641ee726b2fff3431da674eed1e01e95dbaab7a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:30:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67b9b5ba-892a-4b4e-bfcb-10cd7292f753","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67b9b5ba-892a-4b4e-bfcb-10cd7292f753","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67b9b5ba-892a-4b4e-bfcb-10cd7292f753","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5f1a0/auth-test-model-f5f1a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"67b9b5ba-892a-4b4e-bfcb-10cd7292f753","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:30:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67b9b5ba-892a-4b4e-bfcb-10cd7292f753","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:30:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67b9b5ba-892a-4b4e-bfcb-10cd7292f753","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T00:30:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"67b9b5ba-892a-4b4e-bfcb-10cd7292f753","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:30:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"67b9b5ba-892a-4b4e-bfcb-10cd7292f753","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:30:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f2030a5-eed4-4726-9cbc-e1bf8ebed054","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:50556","PortSpecifier":{"PortValue":50556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6f2030a5-eed4-4726-9cbc-e1bf8ebed054","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ead650.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:30:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f2030a5-eed4-4726-9cbc-e1bf8ebed054","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:50556","PortSpecifier":{"PortValue":50556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384224,"nanos":57596670},"http":{"id":"6f2030a5-eed4-4726-9cbc-e1bf8ebed054","method":"POST","headers":{":authority":"e2e-shared-b-ead650.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:30:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6f2030a5-eed4-4726-9cbc-e1bf8ebed054","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:30:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6f2030a5-eed4-4726-9cbc-e1bf8ebed054","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fc8ccae5-ddad-4710-accf-0400aa73fe84","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=86b40590-6f47-4ced-9711-8d70b9b7e4f0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/04fabe1aadfa"]}}
{"level":"debug","ts":"2026-07-07T00:30:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6f2030a5-eed4-4726-9cbc-e1bf8ebed054","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/04fabe1aadfa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86b40590-6f47-4ced-9711-8d70b9b7e4f0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fc8ccae5-ddad-4710-accf-0400aa73fe84","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5867ddd8ecf237e1049f06caf0f6092fbf6fab6fac91fd1fdad8d2536be59ab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ead650.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:30:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f2030a5-eed4-4726-9cbc-e1bf8ebed054","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f2030a5-eed4-4726-9cbc-e1bf8ebed054","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f2030a5-eed4-4726-9cbc-e1bf8ebed054","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ead650/auth-test-model-ead650\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6f2030a5-eed4-4726-9cbc-e1bf8ebed054","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:30:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f2030a5-eed4-4726-9cbc-e1bf8ebed054","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:30:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f2030a5-eed4-4726-9cbc-e1bf8ebed054","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:30:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f2030a5-eed4-4726-9cbc-e1bf8ebed054","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:30:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f2030a5-eed4-4726-9cbc-e1bf8ebed054","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:30:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8680f90-bf42-4644-bda8-e8258638b175","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:43406","PortSpecifier":{"PortValue":43406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a8680f90-bf42-4644-bda8-e8258638b175","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:30:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8680f90-bf42-4644-bda8-e8258638b175","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:43406","PortSpecifier":{"PortValue":43406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384224,"nanos":105314731},"http":{"id":"a8680f90-bf42-4644-bda8-e8258638b175","method":"GET","headers":{":authority":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:30:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a8680f90-bf42-4644-bda8-e8258638b175","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6ZOolQ98RFLy8FNj_kToPaItZdGlmfEUZayzHfPE5XYb2o61fTStHIHhQuOy"}
{"level":"debug","ts":"2026-07-07T00:30:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a8680f90-bf42-4644-bda8-e8258638b175","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6ZOolQ98RFLy8FNj_kToPaItZdGlmfEUZayzHfPE5XYb2o61fTStHIHhQuOy\"}"}
{"level":"debug","ts":"2026-07-07T00:30:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a8680f90-bf42-4644-bda8-e8258638b175","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4de03b25-465e-4049-ae7d-3ec5b47e2678","keyName":"e2e-auth-iso-a-f26c39","subscription":"e2e-auth-iso-33df75","tenant":"e2e-shared-a-f5f1a0","userId":"4de03b25-465e-4049-ae7d-3ec5b47e2678","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:30:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a8680f90-bf42-4644-bda8-e8258638b175","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:30:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8680f90-bf42-4644-bda8-e8258638b175","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8680f90-bf42-4644-bda8-e8258638b175","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8680f90-bf42-4644-bda8-e8258638b175","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5f1a0/auth-test-model-f5f1a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8680f90-bf42-4644-bda8-e8258638b175","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:30:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a8680f90-bf42-4644-bda8-e8258638b175","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T00:30:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8680f90-bf42-4644-bda8-e8258638b175","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-33df75"}
{"level":"debug","ts":"2026-07-07T00:30:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8680f90-bf42-4644-bda8-e8258638b175","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:30:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8680f90-bf42-4644-bda8-e8258638b175","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:30:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8680f90-bf42-4644-bda8-e8258638b175","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:30:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7362790-f110-4b73-afd9-f46938234966","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:54584","PortSpecifier":{"PortValue":54584}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f7362790-f110-4b73-afd9-f46938234966","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:30:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7362790-f110-4b73-afd9-f46938234966","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:54584","PortSpecifier":{"PortValue":54584}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384241,"nanos":154275274},"http":{"id":"f7362790-f110-4b73-afd9-f46938234966","method":"POST","headers":{":authority":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:30:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f7362790-f110-4b73-afd9-f46938234966","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:30:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f7362790-f110-4b73-afd9-f46938234966","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fc8ccae5-ddad-4710-accf-0400aa73fe84","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=86b40590-6f47-4ced-9711-8d70b9b7e4f0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/04fabe1aadfa"]}}
{"level":"debug","ts":"2026-07-07T00:30:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f7362790-f110-4b73-afd9-f46938234966","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/04fabe1aadfa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86b40590-6f47-4ced-9711-8d70b9b7e4f0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fc8ccae5-ddad-4710-accf-0400aa73fe84","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"481ae7f3dbcaf0fae9117afd6641ee726b2fff3431da674eed1e01e95dbaab7a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:30:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7362790-f110-4b73-afd9-f46938234966","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7362790-f110-4b73-afd9-f46938234966","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7362790-f110-4b73-afd9-f46938234966","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5f1a0/auth-test-model-f5f1a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f7362790-f110-4b73-afd9-f46938234966","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:30:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7362790-f110-4b73-afd9-f46938234966","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:30:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7362790-f110-4b73-afd9-f46938234966","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:30:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7362790-f110-4b73-afd9-f46938234966","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:30:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7362790-f110-4b73-afd9-f46938234966","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:30:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39e16c75-ed24-4440-b690-d3c025041df0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:34428","PortSpecifier":{"PortValue":34428}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"39e16c75-ed24-4440-b690-d3c025041df0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ead650.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:30:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39e16c75-ed24-4440-b690-d3c025041df0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:34428","PortSpecifier":{"PortValue":34428}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384241,"nanos":192034023},"http":{"id":"39e16c75-ed24-4440-b690-d3c025041df0","method":"POST","headers":{":authority":"e2e-shared-b-ead650.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:30:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"39e16c75-ed24-4440-b690-d3c025041df0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:30:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"39e16c75-ed24-4440-b690-d3c025041df0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fc8ccae5-ddad-4710-accf-0400aa73fe84","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=86b40590-6f47-4ced-9711-8d70b9b7e4f0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/04fabe1aadfa"]}}
{"level":"debug","ts":"2026-07-07T00:30:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"39e16c75-ed24-4440-b690-d3c025041df0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/04fabe1aadfa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86b40590-6f47-4ced-9711-8d70b9b7e4f0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fc8ccae5-ddad-4710-accf-0400aa73fe84","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5867ddd8ecf237e1049f06caf0f6092fbf6fab6fac91fd1fdad8d2536be59ab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ead650.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:30:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39e16c75-ed24-4440-b690-d3c025041df0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39e16c75-ed24-4440-b690-d3c025041df0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39e16c75-ed24-4440-b690-d3c025041df0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ead650/auth-test-model-ead650\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"39e16c75-ed24-4440-b690-d3c025041df0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:30:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39e16c75-ed24-4440-b690-d3c025041df0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:30:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39e16c75-ed24-4440-b690-d3c025041df0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:30:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39e16c75-ed24-4440-b690-d3c025041df0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:30:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39e16c75-ed24-4440-b690-d3c025041df0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:30:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87a60fde-5d24-4448-8f6c-5c58d11a41cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:34438","PortSpecifier":{"PortValue":34438}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"87a60fde-5d24-4448-8f6c-5c58d11a41cf","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-ead650.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:30:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87a60fde-5d24-4448-8f6c-5c58d11a41cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:34438","PortSpecifier":{"PortValue":34438}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384241,"nanos":231723690},"http":{"id":"87a60fde-5d24-4448-8f6c-5c58d11a41cf","method":"GET","headers":{":authority":"e2e-shared-b-ead650.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:30:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"87a60fde-5d24-4448-8f6c-5c58d11a41cf","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Vv0avkcyabYsZ9RB_uZqBlbAxUNCewDdQHW1YRCIUPr7E7LtQDq4rtuqNqcI"}
{"level":"debug","ts":"2026-07-07T00:30:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"87a60fde-5d24-4448-8f6c-5c58d11a41cf","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-ead650.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Vv0avkcyabYsZ9RB_uZqBlbAxUNCewDdQHW1YRCIUPr7E7LtQDq4rtuqNqcI\"}"}
{"level":"debug","ts":"2026-07-07T00:30:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"87a60fde-5d24-4448-8f6c-5c58d11a41cf","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-ead650.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-07T00:30:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"87a60fde-5d24-4448-8f6c-5c58d11a41cf","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"f5867ddd8ecf237e1049f06caf0f6092fbf6fab6fac91fd1fdad8d2536be59ab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ead650.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:30:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"87a60fde-5d24-4448-8f6c-5c58d11a41cf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-07T00:30:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87a60fde-5d24-4448-8f6c-5c58d11a41cf","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-07T00:30:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87a60fde-5d24-4448-8f6c-5c58d11a41cf","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-07T00:30:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ed735556-ea05-4bab-821e-6adf7f5e5534","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:59828","PortSpecifier":{"PortValue":59828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ed735556-ea05-4bab-821e-6adf7f5e5534","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:30:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ed735556-ea05-4bab-821e-6adf7f5e5534","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:59828","PortSpecifier":{"PortValue":59828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384256,"nanos":193805072},"http":{"id":"ed735556-ea05-4bab-821e-6adf7f5e5534","method":"POST","headers":{":authority":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:30:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ed735556-ea05-4bab-821e-6adf7f5e5534","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:30:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ed735556-ea05-4bab-821e-6adf7f5e5534","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fc8ccae5-ddad-4710-accf-0400aa73fe84","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=86b40590-6f47-4ced-9711-8d70b9b7e4f0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/04fabe1aadfa"]}}
{"level":"debug","ts":"2026-07-07T00:30:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ed735556-ea05-4bab-821e-6adf7f5e5534","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/04fabe1aadfa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86b40590-6f47-4ced-9711-8d70b9b7e4f0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fc8ccae5-ddad-4710-accf-0400aa73fe84","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"481ae7f3dbcaf0fae9117afd6641ee726b2fff3431da674eed1e01e95dbaab7a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:30:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed735556-ea05-4bab-821e-6adf7f5e5534","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed735556-ea05-4bab-821e-6adf7f5e5534","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed735556-ea05-4bab-821e-6adf7f5e5534","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5f1a0/auth-test-model-f5f1a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ed735556-ea05-4bab-821e-6adf7f5e5534","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:30:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed735556-ea05-4bab-821e-6adf7f5e5534","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:30:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed735556-ea05-4bab-821e-6adf7f5e5534","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:30:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ed735556-ea05-4bab-821e-6adf7f5e5534","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:30:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ed735556-ea05-4bab-821e-6adf7f5e5534","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:30:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3fb40106-f747-421b-881c-18f699bee96a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:39716","PortSpecifier":{"PortValue":39716}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3fb40106-f747-421b-881c-18f699bee96a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ead650.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:30:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3fb40106-f747-421b-881c-18f699bee96a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:39716","PortSpecifier":{"PortValue":39716}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384256,"nanos":227547943},"http":{"id":"3fb40106-f747-421b-881c-18f699bee96a","method":"POST","headers":{":authority":"e2e-shared-b-ead650.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:30:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3fb40106-f747-421b-881c-18f699bee96a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:30:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3fb40106-f747-421b-881c-18f699bee96a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fc8ccae5-ddad-4710-accf-0400aa73fe84","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=86b40590-6f47-4ced-9711-8d70b9b7e4f0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/04fabe1aadfa"]}}
{"level":"debug","ts":"2026-07-07T00:30:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3fb40106-f747-421b-881c-18f699bee96a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/04fabe1aadfa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86b40590-6f47-4ced-9711-8d70b9b7e4f0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fc8ccae5-ddad-4710-accf-0400aa73fe84","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5867ddd8ecf237e1049f06caf0f6092fbf6fab6fac91fd1fdad8d2536be59ab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ead650.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:30:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fb40106-f747-421b-881c-18f699bee96a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fb40106-f747-421b-881c-18f699bee96a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fb40106-f747-421b-881c-18f699bee96a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ead650/auth-test-model-ead650\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3fb40106-f747-421b-881c-18f699bee96a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:30:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fb40106-f747-421b-881c-18f699bee96a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:30:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fb40106-f747-421b-881c-18f699bee96a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:30:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3fb40106-f747-421b-881c-18f699bee96a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:30:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3fb40106-f747-421b-881c-18f699bee96a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:30:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d5ab081-d34c-4a0c-864b-a8831f1c2794","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:59832","PortSpecifier":{"PortValue":59832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6d5ab081-d34c-4a0c-864b-a8831f1c2794","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:30:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d5ab081-d34c-4a0c-864b-a8831f1c2794","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:59832","PortSpecifier":{"PortValue":59832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384256,"nanos":261451588},"http":{"id":"6d5ab081-d34c-4a0c-864b-a8831f1c2794","method":"POST","headers":{":authority":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:30:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6d5ab081-d34c-4a0c-864b-a8831f1c2794","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:30:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6d5ab081-d34c-4a0c-864b-a8831f1c2794","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fc8ccae5-ddad-4710-accf-0400aa73fe84","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=86b40590-6f47-4ced-9711-8d70b9b7e4f0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/04fabe1aadfa"]}}
{"level":"debug","ts":"2026-07-07T00:30:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6d5ab081-d34c-4a0c-864b-a8831f1c2794","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/04fabe1aadfa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86b40590-6f47-4ced-9711-8d70b9b7e4f0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fc8ccae5-ddad-4710-accf-0400aa73fe84","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"481ae7f3dbcaf0fae9117afd6641ee726b2fff3431da674eed1e01e95dbaab7a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:30:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d5ab081-d34c-4a0c-864b-a8831f1c2794","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d5ab081-d34c-4a0c-864b-a8831f1c2794","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d5ab081-d34c-4a0c-864b-a8831f1c2794","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5f1a0/auth-test-model-f5f1a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6d5ab081-d34c-4a0c-864b-a8831f1c2794","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:30:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d5ab081-d34c-4a0c-864b-a8831f1c2794","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:30:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d5ab081-d34c-4a0c-864b-a8831f1c2794","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:30:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d5ab081-d34c-4a0c-864b-a8831f1c2794","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:30:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d5ab081-d34c-4a0c-864b-a8831f1c2794","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:30:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5cbb7d67-0871-473b-a2b5-376f2b8e3a19","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:39726","PortSpecifier":{"PortValue":39726}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5cbb7d67-0871-473b-a2b5-376f2b8e3a19","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-ead650.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:30:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5cbb7d67-0871-473b-a2b5-376f2b8e3a19","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:39726","PortSpecifier":{"PortValue":39726}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384256,"nanos":300331761},"http":{"id":"5cbb7d67-0871-473b-a2b5-376f2b8e3a19","method":"POST","headers":{":authority":"e2e-shared-b-ead650.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:30:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5cbb7d67-0871-473b-a2b5-376f2b8e3a19","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:30:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5cbb7d67-0871-473b-a2b5-376f2b8e3a19","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fc8ccae5-ddad-4710-accf-0400aa73fe84","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=86b40590-6f47-4ced-9711-8d70b9b7e4f0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/04fabe1aadfa"]}}
{"level":"debug","ts":"2026-07-07T00:30:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5cbb7d67-0871-473b-a2b5-376f2b8e3a19","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/04fabe1aadfa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86b40590-6f47-4ced-9711-8d70b9b7e4f0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fc8ccae5-ddad-4710-accf-0400aa73fe84","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5867ddd8ecf237e1049f06caf0f6092fbf6fab6fac91fd1fdad8d2536be59ab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ead650.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:30:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5cbb7d67-0871-473b-a2b5-376f2b8e3a19","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5cbb7d67-0871-473b-a2b5-376f2b8e3a19","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5cbb7d67-0871-473b-a2b5-376f2b8e3a19","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ead650/auth-test-model-ead650\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5cbb7d67-0871-473b-a2b5-376f2b8e3a19","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:30:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5cbb7d67-0871-473b-a2b5-376f2b8e3a19","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:30:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5cbb7d67-0871-473b-a2b5-376f2b8e3a19","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:30:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5cbb7d67-0871-473b-a2b5-376f2b8e3a19","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:30:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5cbb7d67-0871-473b-a2b5-376f2b8e3a19","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:31:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a648b89-19aa-4a83-bc53-188045950ba6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:44188","PortSpecifier":{"PortValue":44188}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8a648b89-19aa-4a83-bc53-188045950ba6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:31:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a648b89-19aa-4a83-bc53-188045950ba6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:44188","PortSpecifier":{"PortValue":44188}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384273,"nanos":326616932},"http":{"id":"8a648b89-19aa-4a83-bc53-188045950ba6","method":"POST","headers":{":authority":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:31:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8a648b89-19aa-4a83-bc53-188045950ba6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:31:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8a648b89-19aa-4a83-bc53-188045950ba6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fc8ccae5-ddad-4710-accf-0400aa73fe84","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=86b40590-6f47-4ced-9711-8d70b9b7e4f0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/04fabe1aadfa"]}}
{"level":"debug","ts":"2026-07-07T00:31:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8a648b89-19aa-4a83-bc53-188045950ba6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/04fabe1aadfa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86b40590-6f47-4ced-9711-8d70b9b7e4f0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fc8ccae5-ddad-4710-accf-0400aa73fe84","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"481ae7f3dbcaf0fae9117afd6641ee726b2fff3431da674eed1e01e95dbaab7a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:31:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a648b89-19aa-4a83-bc53-188045950ba6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a648b89-19aa-4a83-bc53-188045950ba6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a648b89-19aa-4a83-bc53-188045950ba6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5f1a0/auth-test-model-f5f1a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8a648b89-19aa-4a83-bc53-188045950ba6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:31:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a648b89-19aa-4a83-bc53-188045950ba6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:31:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a648b89-19aa-4a83-bc53-188045950ba6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:31:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a648b89-19aa-4a83-bc53-188045950ba6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:31:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a648b89-19aa-4a83-bc53-188045950ba6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:31:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e940aff-0685-4f8b-a8fc-3630638e2ca2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:37162","PortSpecifier":{"PortValue":37162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4e940aff-0685-4f8b-a8fc-3630638e2ca2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ead650.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:31:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e940aff-0685-4f8b-a8fc-3630638e2ca2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:37162","PortSpecifier":{"PortValue":37162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384273,"nanos":363840329},"http":{"id":"4e940aff-0685-4f8b-a8fc-3630638e2ca2","method":"POST","headers":{":authority":"e2e-shared-b-ead650.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:31:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4e940aff-0685-4f8b-a8fc-3630638e2ca2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:31:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4e940aff-0685-4f8b-a8fc-3630638e2ca2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fc8ccae5-ddad-4710-accf-0400aa73fe84","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=86b40590-6f47-4ced-9711-8d70b9b7e4f0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/04fabe1aadfa"]}}
{"level":"debug","ts":"2026-07-07T00:31:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4e940aff-0685-4f8b-a8fc-3630638e2ca2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/04fabe1aadfa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86b40590-6f47-4ced-9711-8d70b9b7e4f0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fc8ccae5-ddad-4710-accf-0400aa73fe84","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5867ddd8ecf237e1049f06caf0f6092fbf6fab6fac91fd1fdad8d2536be59ab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ead650.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:31:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e940aff-0685-4f8b-a8fc-3630638e2ca2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e940aff-0685-4f8b-a8fc-3630638e2ca2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e940aff-0685-4f8b-a8fc-3630638e2ca2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ead650/auth-test-model-ead650\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4e940aff-0685-4f8b-a8fc-3630638e2ca2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:31:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e940aff-0685-4f8b-a8fc-3630638e2ca2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:31:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e940aff-0685-4f8b-a8fc-3630638e2ca2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T00:31:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e940aff-0685-4f8b-a8fc-3630638e2ca2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:31:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e940aff-0685-4f8b-a8fc-3630638e2ca2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:31:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"854a8ca9-2c7f-4934-82cb-c9bab2fc0aab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:37164","PortSpecifier":{"PortValue":37164}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"854a8ca9-2c7f-4934-82cb-c9bab2fc0aab","method":"GET","path":"/maas-api/v1/api-keys/ac3555be-d387-42b2-9a68-1f8897ed8468","host":"e2e-shared-b-ead650.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:31:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"854a8ca9-2c7f-4934-82cb-c9bab2fc0aab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:37164","PortSpecifier":{"PortValue":37164}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384273,"nanos":398673890},"http":{"id":"854a8ca9-2c7f-4934-82cb-c9bab2fc0aab","method":"GET","headers":{":authority":"e2e-shared-b-ead650.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ac3555be-d387-42b2-9a68-1f8897ed8468",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:31:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"854a8ca9-2c7f-4934-82cb-c9bab2fc0aab","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:31:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"854a8ca9-2c7f-4934-82cb-c9bab2fc0aab","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fc8ccae5-ddad-4710-accf-0400aa73fe84","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=86b40590-6f47-4ced-9711-8d70b9b7e4f0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/04fabe1aadfa"]}}
{"level":"debug","ts":"2026-07-07T00:31:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"854a8ca9-2c7f-4934-82cb-c9bab2fc0aab","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/04fabe1aadfa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86b40590-6f47-4ced-9711-8d70b9b7e4f0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fc8ccae5-ddad-4710-accf-0400aa73fe84","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5867ddd8ecf237e1049f06caf0f6092fbf6fab6fac91fd1fdad8d2536be59ab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ead650.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ac3555be-d387-42b2-9a68-1f8897ed8468",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:31:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"854a8ca9-2c7f-4934-82cb-c9bab2fc0aab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"854a8ca9-2c7f-4934-82cb-c9bab2fc0aab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"854a8ca9-2c7f-4934-82cb-c9bab2fc0aab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ead650/auth-test-model-ead650\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"854a8ca9-2c7f-4934-82cb-c9bab2fc0aab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:31:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"854a8ca9-2c7f-4934-82cb-c9bab2fc0aab","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:31:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"854a8ca9-2c7f-4934-82cb-c9bab2fc0aab","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T00:31:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"854a8ca9-2c7f-4934-82cb-c9bab2fc0aab","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:31:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"854a8ca9-2c7f-4934-82cb-c9bab2fc0aab","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:31:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d922925-c949-4740-8462-fdc4a0537eae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:44204","PortSpecifier":{"PortValue":44204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5d922925-c949-4740-8462-fdc4a0537eae","method":"GET","path":"/maas-api/v1/api-keys/ac3555be-d387-42b2-9a68-1f8897ed8468","host":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:31:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d922925-c949-4740-8462-fdc4a0537eae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:44204","PortSpecifier":{"PortValue":44204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384273,"nanos":433270420},"http":{"id":"5d922925-c949-4740-8462-fdc4a0537eae","method":"GET","headers":{":authority":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ac3555be-d387-42b2-9a68-1f8897ed8468",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:31:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5d922925-c949-4740-8462-fdc4a0537eae","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:31:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5d922925-c949-4740-8462-fdc4a0537eae","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fc8ccae5-ddad-4710-accf-0400aa73fe84","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=86b40590-6f47-4ced-9711-8d70b9b7e4f0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/04fabe1aadfa"]}}
{"level":"debug","ts":"2026-07-07T00:31:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5d922925-c949-4740-8462-fdc4a0537eae","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/04fabe1aadfa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86b40590-6f47-4ced-9711-8d70b9b7e4f0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fc8ccae5-ddad-4710-accf-0400aa73fe84","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"481ae7f3dbcaf0fae9117afd6641ee726b2fff3431da674eed1e01e95dbaab7a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ac3555be-d387-42b2-9a68-1f8897ed8468",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:31:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d922925-c949-4740-8462-fdc4a0537eae","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d922925-c949-4740-8462-fdc4a0537eae","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d922925-c949-4740-8462-fdc4a0537eae","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5f1a0/auth-test-model-f5f1a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5d922925-c949-4740-8462-fdc4a0537eae","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:31:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d922925-c949-4740-8462-fdc4a0537eae","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:31:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d922925-c949-4740-8462-fdc4a0537eae","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T00:31:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d922925-c949-4740-8462-fdc4a0537eae","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:31:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d922925-c949-4740-8462-fdc4a0537eae","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:31:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c710b07-0155-4ecc-844f-6baf3109a97a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:37144","PortSpecifier":{"PortValue":37144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7c710b07-0155-4ecc-844f-6baf3109a97a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:31:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c710b07-0155-4ecc-844f-6baf3109a97a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:37144","PortSpecifier":{"PortValue":37144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384295,"nanos":592312218},"http":{"id":"7c710b07-0155-4ecc-844f-6baf3109a97a","method":"POST","headers":{":authority":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:31:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7c710b07-0155-4ecc-844f-6baf3109a97a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:31:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7c710b07-0155-4ecc-844f-6baf3109a97a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fc8ccae5-ddad-4710-accf-0400aa73fe84","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=86b40590-6f47-4ced-9711-8d70b9b7e4f0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/04fabe1aadfa"]}}
{"level":"debug","ts":"2026-07-07T00:31:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7c710b07-0155-4ecc-844f-6baf3109a97a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/04fabe1aadfa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86b40590-6f47-4ced-9711-8d70b9b7e4f0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fc8ccae5-ddad-4710-accf-0400aa73fe84","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"481ae7f3dbcaf0fae9117afd6641ee726b2fff3431da674eed1e01e95dbaab7a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:31:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c710b07-0155-4ecc-844f-6baf3109a97a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c710b07-0155-4ecc-844f-6baf3109a97a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c710b07-0155-4ecc-844f-6baf3109a97a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5f1a0/auth-test-model-f5f1a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7c710b07-0155-4ecc-844f-6baf3109a97a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:31:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c710b07-0155-4ecc-844f-6baf3109a97a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:31:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c710b07-0155-4ecc-844f-6baf3109a97a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:31:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c710b07-0155-4ecc-844f-6baf3109a97a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:31:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c710b07-0155-4ecc-844f-6baf3109a97a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:31:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"827950bb-0e64-491b-a2b3-33e095b2b906","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:52466","PortSpecifier":{"PortValue":52466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"827950bb-0e64-491b-a2b3-33e095b2b906","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ead650.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:31:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"827950bb-0e64-491b-a2b3-33e095b2b906","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:52466","PortSpecifier":{"PortValue":52466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384295,"nanos":627390757},"http":{"id":"827950bb-0e64-491b-a2b3-33e095b2b906","method":"POST","headers":{":authority":"e2e-shared-b-ead650.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:31:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"827950bb-0e64-491b-a2b3-33e095b2b906","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:31:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"827950bb-0e64-491b-a2b3-33e095b2b906","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fc8ccae5-ddad-4710-accf-0400aa73fe84","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=86b40590-6f47-4ced-9711-8d70b9b7e4f0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/04fabe1aadfa"]}}
{"level":"debug","ts":"2026-07-07T00:31:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"827950bb-0e64-491b-a2b3-33e095b2b906","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/04fabe1aadfa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86b40590-6f47-4ced-9711-8d70b9b7e4f0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fc8ccae5-ddad-4710-accf-0400aa73fe84","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5867ddd8ecf237e1049f06caf0f6092fbf6fab6fac91fd1fdad8d2536be59ab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ead650.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:31:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"827950bb-0e64-491b-a2b3-33e095b2b906","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"827950bb-0e64-491b-a2b3-33e095b2b906","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"827950bb-0e64-491b-a2b3-33e095b2b906","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ead650/auth-test-model-ead650\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"827950bb-0e64-491b-a2b3-33e095b2b906","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:31:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"827950bb-0e64-491b-a2b3-33e095b2b906","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:31:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"827950bb-0e64-491b-a2b3-33e095b2b906","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:31:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"827950bb-0e64-491b-a2b3-33e095b2b906","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:31:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"827950bb-0e64-491b-a2b3-33e095b2b906","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:31:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"925a2c74-e7e6-4458-b3f8-788a50287925","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:37154","PortSpecifier":{"PortValue":37154}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"925a2c74-e7e6-4458-b3f8-788a50287925","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:31:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"925a2c74-e7e6-4458-b3f8-788a50287925","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:37154","PortSpecifier":{"PortValue":37154}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384295,"nanos":666855594},"http":{"id":"925a2c74-e7e6-4458-b3f8-788a50287925","method":"POST","headers":{":authority":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:31:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"925a2c74-e7e6-4458-b3f8-788a50287925","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-sCxH2vEwDwZZJcHX_x6HNQMkGVWAz5CspxgZTAS1hnjHpNXkQ3SGN3E320yD"}
{"level":"debug","ts":"2026-07-07T00:31:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"925a2c74-e7e6-4458-b3f8-788a50287925","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-sCxH2vEwDwZZJcHX_x6HNQMkGVWAz5CspxgZTAS1hnjHpNXkQ3SGN3E320yD\"}"}
{"level":"debug","ts":"2026-07-07T00:31:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"925a2c74-e7e6-4458-b3f8-788a50287925","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8fcc9533-9d15-4112-be68-6824d08e711b","keyName":"e2e-auth-iso-a-33b9aa","subscription":"e2e-auth-iso-9fa5d3","tenant":"e2e-shared-a-f5f1a0","userId":"8fcc9533-9d15-4112-be68-6824d08e711b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:31:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"925a2c74-e7e6-4458-b3f8-788a50287925","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:31:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"925a2c74-e7e6-4458-b3f8-788a50287925","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"925a2c74-e7e6-4458-b3f8-788a50287925","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"925a2c74-e7e6-4458-b3f8-788a50287925","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5f1a0/auth-test-model-f5f1a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"925a2c74-e7e6-4458-b3f8-788a50287925","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:31:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"925a2c74-e7e6-4458-b3f8-788a50287925","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T00:31:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"925a2c74-e7e6-4458-b3f8-788a50287925","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:31:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"925a2c74-e7e6-4458-b3f8-788a50287925","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-9fa5d3"}
{"level":"info","ts":"2026-07-07T00:31:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"925a2c74-e7e6-4458-b3f8-788a50287925","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:31:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"925a2c74-e7e6-4458-b3f8-788a50287925","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:31:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eccc3c46acec289c2f6a02f1e70d7264d21bbe9e4bd8ffbac055d9c30ef9b56d"}
{"level":"info","ts":"2026-07-07T00:31:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a9445f0279d25980441b59f435b27e8d651dae2cef45ced25cd468f1aed054f"}
{"level":"info","ts":"2026-07-07T00:31:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/52a712293eb545685641a66e2a807687f6b105a153d9244c30d72fdac7c2fb53"}
{"level":"info","ts":"2026-07-07T00:31:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4443a61c6b661b08b08405d68087e8a67c0b7fc8d16ce496063f8e7e5179d91b"}
{"level":"info","ts":"2026-07-07T00:31:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f66c641f6822a894cc1a8210ac7c8740080cd69a741ce3798af30108ec5b908d"}
{"level":"info","ts":"2026-07-07T00:31:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/080a29703654ff189f0e82c0d6f37aa1cbd434e6a90b89957770d94c6ee52f84"}
{"level":"info","ts":"2026-07-07T00:31:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/77e04f10f967f96a9427e491760d278aee465a29f5d17f17145fa57f5a86eff1"}
{"level":"info","ts":"2026-07-07T00:31:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0c007252d31ee5dc3e79af621e41dd8b704d17822563cd58078d40a392c18f00"}
{"level":"info","ts":"2026-07-07T00:31:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/343c7bea76e9cea3136cc5d9103b0187ad3024aca15d97a0c24becf8ba0a57d1"}
{"level":"info","ts":"2026-07-07T00:31:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9c35929d56e01e3434af145def9d10be77c1af7de6b1acc3fbb39dbf5268006"}
{"level":"info","ts":"2026-07-07T00:31:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6baeaf8e016fea95b3e2e3a383b75678f783365ccc5a4b62f9b05372d2889004"}
{"level":"info","ts":"2026-07-07T00:31:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cea6b222800a9e1016138f3d61be30d4a9be0c6d1b03e01456575d62ed3ce851"}
{"level":"info","ts":"2026-07-07T00:31:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc2776a61b30ac513d87774a8b4a200bbb250d0a821ac5f38e3629ac3c9443cb"}
{"level":"info","ts":"2026-07-07T00:31:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d2666e13b7f0d0cd649d6bd28e795e8937662c0c09eae27a807ffc48092f213f"}
{"level":"info","ts":"2026-07-07T00:31:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db1f27d2dc6d96c9f35d39f5945b5e9354a4b8b68793de2b849eda9f75a9e725"}
{"level":"info","ts":"2026-07-07T00:31:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b52e4c3f6cd049c6dd50325f0d63d59627b8027fa3546c9f6483d1fecf06875"}
{"level":"debug","ts":"2026-07-07T00:31:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c8aa48347ea2eda7a528f9eee596a4a891c60f35f923625a206336ff477eba8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c8aa48347ea2eda7a528f9eee596a4a891c60f35f923625a206336ff477eba8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c8aa48347ea2eda7a528f9eee596a4a891c60f35f923625a206336ff477eba8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c8aa48347ea2eda7a528f9eee596a4a891c60f35f923625a206336ff477eba8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:31:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c8aa48347ea2eda7a528f9eee596a4a891c60f35f923625a206336ff477eba8"}
{"level":"debug","ts":"2026-07-07T00:31:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c8aa48347ea2eda7a528f9eee596a4a891c60f35f923625a206336ff477eba8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:31:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c8aa48347ea2eda7a528f9eee596a4a891c60f35f923625a206336ff477eba8"}
{"level":"debug","ts":"2026-07-07T00:31:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c8aa48347ea2eda7a528f9eee596a4a891c60f35f923625a206336ff477eba8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c8aa48347ea2eda7a528f9eee596a4a891c60f35f923625a206336ff477eba8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c8aa48347ea2eda7a528f9eee596a4a891c60f35f923625a206336ff477eba8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c8aa48347ea2eda7a528f9eee596a4a891c60f35f923625a206336ff477eba8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:31:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c8aa48347ea2eda7a528f9eee596a4a891c60f35f923625a206336ff477eba8"}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cc687494a4cde53e789b7d7a2725b6fb33ac54c88bdd1696f84743104428bc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cc687494a4cde53e789b7d7a2725b6fb33ac54c88bdd1696f84743104428bc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cc687494a4cde53e789b7d7a2725b6fb33ac54c88bdd1696f84743104428bc2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cc687494a4cde53e789b7d7a2725b6fb33ac54c88bdd1696f84743104428bc2"}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cc687494a4cde53e789b7d7a2725b6fb33ac54c88bdd1696f84743104428bc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cc687494a4cde53e789b7d7a2725b6fb33ac54c88bdd1696f84743104428bc2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cc687494a4cde53e789b7d7a2725b6fb33ac54c88bdd1696f84743104428bc2"}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cc687494a4cde53e789b7d7a2725b6fb33ac54c88bdd1696f84743104428bc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cc687494a4cde53e789b7d7a2725b6fb33ac54c88bdd1696f84743104428bc2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cc687494a4cde53e789b7d7a2725b6fb33ac54c88bdd1696f84743104428bc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cc687494a4cde53e789b7d7a2725b6fb33ac54c88bdd1696f84743104428bc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cc687494a4cde53e789b7d7a2725b6fb33ac54c88bdd1696f84743104428bc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35e598d5ca9a4b3dfa4c96c2f2aa4eb3748d6ccf80b87f7b42db1c8afcb891a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cc687494a4cde53e789b7d7a2725b6fb33ac54c88bdd1696f84743104428bc2"}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35e598d5ca9a4b3dfa4c96c2f2aa4eb3748d6ccf80b87f7b42db1c8afcb891a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cc687494a4cde53e789b7d7a2725b6fb33ac54c88bdd1696f84743104428bc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cc687494a4cde53e789b7d7a2725b6fb33ac54c88bdd1696f84743104428bc2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35e598d5ca9a4b3dfa4c96c2f2aa4eb3748d6ccf80b87f7b42db1c8afcb891a6"}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cc687494a4cde53e789b7d7a2725b6fb33ac54c88bdd1696f84743104428bc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35e598d5ca9a4b3dfa4c96c2f2aa4eb3748d6ccf80b87f7b42db1c8afcb891a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35e598d5ca9a4b3dfa4c96c2f2aa4eb3748d6ccf80b87f7b42db1c8afcb891a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35e598d5ca9a4b3dfa4c96c2f2aa4eb3748d6ccf80b87f7b42db1c8afcb891a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cc687494a4cde53e789b7d7a2725b6fb33ac54c88bdd1696f84743104428bc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cc687494a4cde53e789b7d7a2725b6fb33ac54c88bdd1696f84743104428bc2"}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cc687494a4cde53e789b7d7a2725b6fb33ac54c88bdd1696f84743104428bc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35e598d5ca9a4b3dfa4c96c2f2aa4eb3748d6ccf80b87f7b42db1c8afcb891a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35e598d5ca9a4b3dfa4c96c2f2aa4eb3748d6ccf80b87f7b42db1c8afcb891a6"}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35e598d5ca9a4b3dfa4c96c2f2aa4eb3748d6ccf80b87f7b42db1c8afcb891a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cc687494a4cde53e789b7d7a2725b6fb33ac54c88bdd1696f84743104428bc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35e598d5ca9a4b3dfa4c96c2f2aa4eb3748d6ccf80b87f7b42db1c8afcb891a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35e598d5ca9a4b3dfa4c96c2f2aa4eb3748d6ccf80b87f7b42db1c8afcb891a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cc687494a4cde53e789b7d7a2725b6fb33ac54c88bdd1696f84743104428bc2"}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35e598d5ca9a4b3dfa4c96c2f2aa4eb3748d6ccf80b87f7b42db1c8afcb891a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cc687494a4cde53e789b7d7a2725b6fb33ac54c88bdd1696f84743104428bc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cc687494a4cde53e789b7d7a2725b6fb33ac54c88bdd1696f84743104428bc2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cc687494a4cde53e789b7d7a2725b6fb33ac54c88bdd1696f84743104428bc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35e598d5ca9a4b3dfa4c96c2f2aa4eb3748d6ccf80b87f7b42db1c8afcb891a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35e598d5ca9a4b3dfa4c96c2f2aa4eb3748d6ccf80b87f7b42db1c8afcb891a6"}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35e598d5ca9a4b3dfa4c96c2f2aa4eb3748d6ccf80b87f7b42db1c8afcb891a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cc687494a4cde53e789b7d7a2725b6fb33ac54c88bdd1696f84743104428bc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cc687494a4cde53e789b7d7a2725b6fb33ac54c88bdd1696f84743104428bc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35e598d5ca9a4b3dfa4c96c2f2aa4eb3748d6ccf80b87f7b42db1c8afcb891a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35e598d5ca9a4b3dfa4c96c2f2aa4eb3748d6ccf80b87f7b42db1c8afcb891a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cc687494a4cde53e789b7d7a2725b6fb33ac54c88bdd1696f84743104428bc2"}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35e598d5ca9a4b3dfa4c96c2f2aa4eb3748d6ccf80b87f7b42db1c8afcb891a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cc687494a4cde53e789b7d7a2725b6fb33ac54c88bdd1696f84743104428bc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cc687494a4cde53e789b7d7a2725b6fb33ac54c88bdd1696f84743104428bc2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35e598d5ca9a4b3dfa4c96c2f2aa4eb3748d6ccf80b87f7b42db1c8afcb891a6"}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cc687494a4cde53e789b7d7a2725b6fb33ac54c88bdd1696f84743104428bc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35e598d5ca9a4b3dfa4c96c2f2aa4eb3748d6ccf80b87f7b42db1c8afcb891a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cc687494a4cde53e789b7d7a2725b6fb33ac54c88bdd1696f84743104428bc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cc687494a4cde53e789b7d7a2725b6fb33ac54c88bdd1696f84743104428bc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a31fa272fda1769c98b6afa3fa161ecb8225bf21bbc9a2c6d7de6a9a3ecb195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cc687494a4cde53e789b7d7a2725b6fb33ac54c88bdd1696f84743104428bc2"}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a31fa272fda1769c98b6afa3fa161ecb8225bf21bbc9a2c6d7de6a9a3ecb195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cc687494a4cde53e789b7d7a2725b6fb33ac54c88bdd1696f84743104428bc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cc687494a4cde53e789b7d7a2725b6fb33ac54c88bdd1696f84743104428bc2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35e598d5ca9a4b3dfa4c96c2f2aa4eb3748d6ccf80b87f7b42db1c8afcb891a6"}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cc687494a4cde53e789b7d7a2725b6fb33ac54c88bdd1696f84743104428bc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a31fa272fda1769c98b6afa3fa161ecb8225bf21bbc9a2c6d7de6a9a3ecb195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a31fa272fda1769c98b6afa3fa161ecb8225bf21bbc9a2c6d7de6a9a3ecb195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cc687494a4cde53e789b7d7a2725b6fb33ac54c88bdd1696f84743104428bc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a31fa272fda1769c98b6afa3fa161ecb8225bf21bbc9a2c6d7de6a9a3ecb195","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a31fa272fda1769c98b6afa3fa161ecb8225bf21bbc9a2c6d7de6a9a3ecb195"}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a31fa272fda1769c98b6afa3fa161ecb8225bf21bbc9a2c6d7de6a9a3ecb195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a31fa272fda1769c98b6afa3fa161ecb8225bf21bbc9a2c6d7de6a9a3ecb195"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a31fa272fda1769c98b6afa3fa161ecb8225bf21bbc9a2c6d7de6a9a3ecb195","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cc687494a4cde53e789b7d7a2725b6fb33ac54c88bdd1696f84743104428bc2"}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a31fa272fda1769c98b6afa3fa161ecb8225bf21bbc9a2c6d7de6a9a3ecb195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a31fa272fda1769c98b6afa3fa161ecb8225bf21bbc9a2c6d7de6a9a3ecb195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a31fa272fda1769c98b6afa3fa161ecb8225bf21bbc9a2c6d7de6a9a3ecb195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a31fa272fda1769c98b6afa3fa161ecb8225bf21bbc9a2c6d7de6a9a3ecb195","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a31fa272fda1769c98b6afa3fa161ecb8225bf21bbc9a2c6d7de6a9a3ecb195"}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a31fa272fda1769c98b6afa3fa161ecb8225bf21bbc9a2c6d7de6a9a3ecb195","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a31fa272fda1769c98b6afa3fa161ecb8225bf21bbc9a2c6d7de6a9a3ecb195"}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a31fa272fda1769c98b6afa3fa161ecb8225bf21bbc9a2c6d7de6a9a3ecb195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a31fa272fda1769c98b6afa3fa161ecb8225bf21bbc9a2c6d7de6a9a3ecb195"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a31fa272fda1769c98b6afa3fa161ecb8225bf21bbc9a2c6d7de6a9a3ecb195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a31fa272fda1769c98b6afa3fa161ecb8225bf21bbc9a2c6d7de6a9a3ecb195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a31fa272fda1769c98b6afa3fa161ecb8225bf21bbc9a2c6d7de6a9a3ecb195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1973c238ce79c54b7dec58cefd5b52df7cd6816cec9e88fd15735f767402b0f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a31fa272fda1769c98b6afa3fa161ecb8225bf21bbc9a2c6d7de6a9a3ecb195"}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1973c238ce79c54b7dec58cefd5b52df7cd6816cec9e88fd15735f767402b0f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a31fa272fda1769c98b6afa3fa161ecb8225bf21bbc9a2c6d7de6a9a3ecb195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a31fa272fda1769c98b6afa3fa161ecb8225bf21bbc9a2c6d7de6a9a3ecb195"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a31fa272fda1769c98b6afa3fa161ecb8225bf21bbc9a2c6d7de6a9a3ecb195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1973c238ce79c54b7dec58cefd5b52df7cd6816cec9e88fd15735f767402b0f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1973c238ce79c54b7dec58cefd5b52df7cd6816cec9e88fd15735f767402b0f5"}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1973c238ce79c54b7dec58cefd5b52df7cd6816cec9e88fd15735f767402b0f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a31fa272fda1769c98b6afa3fa161ecb8225bf21bbc9a2c6d7de6a9a3ecb195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a31fa272fda1769c98b6afa3fa161ecb8225bf21bbc9a2c6d7de6a9a3ecb195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1973c238ce79c54b7dec58cefd5b52df7cd6816cec9e88fd15735f767402b0f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1973c238ce79c54b7dec58cefd5b52df7cd6816cec9e88fd15735f767402b0f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a31fa272fda1769c98b6afa3fa161ecb8225bf21bbc9a2c6d7de6a9a3ecb195"}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1973c238ce79c54b7dec58cefd5b52df7cd6816cec9e88fd15735f767402b0f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a31fa272fda1769c98b6afa3fa161ecb8225bf21bbc9a2c6d7de6a9a3ecb195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a31fa272fda1769c98b6afa3fa161ecb8225bf21bbc9a2c6d7de6a9a3ecb195"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1973c238ce79c54b7dec58cefd5b52df7cd6816cec9e88fd15735f767402b0f5"}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a31fa272fda1769c98b6afa3fa161ecb8225bf21bbc9a2c6d7de6a9a3ecb195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1973c238ce79c54b7dec58cefd5b52df7cd6816cec9e88fd15735f767402b0f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a31fa272fda1769c98b6afa3fa161ecb8225bf21bbc9a2c6d7de6a9a3ecb195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a31fa272fda1769c98b6afa3fa161ecb8225bf21bbc9a2c6d7de6a9a3ecb195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a31fa272fda1769c98b6afa3fa161ecb8225bf21bbc9a2c6d7de6a9a3ecb195"}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a31fa272fda1769c98b6afa3fa161ecb8225bf21bbc9a2c6d7de6a9a3ecb195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a31fa272fda1769c98b6afa3fa161ecb8225bf21bbc9a2c6d7de6a9a3ecb195"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a31fa272fda1769c98b6afa3fa161ecb8225bf21bbc9a2c6d7de6a9a3ecb195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a31fa272fda1769c98b6afa3fa161ecb8225bf21bbc9a2c6d7de6a9a3ecb195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1973c238ce79c54b7dec58cefd5b52df7cd6816cec9e88fd15735f767402b0f5"}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35"}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4e722edd2aab2f443c7026ef3f19b0e2865f99ebcb2c025ac3698fdc477b866","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a31fa272fda1769c98b6afa3fa161ecb8225bf21bbc9a2c6d7de6a9a3ecb195"}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4e722edd2aab2f443c7026ef3f19b0e2865f99ebcb2c025ac3698fdc477b866","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4e722edd2aab2f443c7026ef3f19b0e2865f99ebcb2c025ac3698fdc477b866","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4e722edd2aab2f443c7026ef3f19b0e2865f99ebcb2c025ac3698fdc477b866","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35"}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4e722edd2aab2f443c7026ef3f19b0e2865f99ebcb2c025ac3698fdc477b866","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4e722edd2aab2f443c7026ef3f19b0e2865f99ebcb2c025ac3698fdc477b866"}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4e722edd2aab2f443c7026ef3f19b0e2865f99ebcb2c025ac3698fdc477b866","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acdcd6bd34ed167fe2b69be67eed04307c37b1b2d68e70854e7ee8610ae143dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35"}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acdcd6bd34ed167fe2b69be67eed04307c37b1b2d68e70854e7ee8610ae143dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4e722edd2aab2f443c7026ef3f19b0e2865f99ebcb2c025ac3698fdc477b866","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4e722edd2aab2f443c7026ef3f19b0e2865f99ebcb2c025ac3698fdc477b866"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acdcd6bd34ed167fe2b69be67eed04307c37b1b2d68e70854e7ee8610ae143dd"}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4e722edd2aab2f443c7026ef3f19b0e2865f99ebcb2c025ac3698fdc477b866","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4e722edd2aab2f443c7026ef3f19b0e2865f99ebcb2c025ac3698fdc477b866"}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acdcd6bd34ed167fe2b69be67eed04307c37b1b2d68e70854e7ee8610ae143dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acdcd6bd34ed167fe2b69be67eed04307c37b1b2d68e70854e7ee8610ae143dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acdcd6bd34ed167fe2b69be67eed04307c37b1b2d68e70854e7ee8610ae143dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4e722edd2aab2f443c7026ef3f19b0e2865f99ebcb2c025ac3698fdc477b866","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35"}
{"level":"info","ts":"2026-07-07T00:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acdcd6bd34ed167fe2b69be67eed04307c37b1b2d68e70854e7ee8610ae143dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acdcd6bd34ed167fe2b69be67eed04307c37b1b2d68e70854e7ee8610ae143dd"}
{"level":"info","ts":"2026-07-07T00:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acdcd6bd34ed167fe2b69be67eed04307c37b1b2d68e70854e7ee8610ae143dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4e722edd2aab2f443c7026ef3f19b0e2865f99ebcb2c025ac3698fdc477b866"}
{"level":"info","ts":"2026-07-07T00:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acdcd6bd34ed167fe2b69be67eed04307c37b1b2d68e70854e7ee8610ae143dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acdcd6bd34ed167fe2b69be67eed04307c37b1b2d68e70854e7ee8610ae143dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acdcd6bd34ed167fe2b69be67eed04307c37b1b2d68e70854e7ee8610ae143dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35"}
{"level":"info","ts":"2026-07-07T00:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acdcd6bd34ed167fe2b69be67eed04307c37b1b2d68e70854e7ee8610ae143dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acdcd6bd34ed167fe2b69be67eed04307c37b1b2d68e70854e7ee8610ae143dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acdcd6bd34ed167fe2b69be67eed04307c37b1b2d68e70854e7ee8610ae143dd"}
{"level":"info","ts":"2026-07-07T00:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acdcd6bd34ed167fe2b69be67eed04307c37b1b2d68e70854e7ee8610ae143dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acdcd6bd34ed167fe2b69be67eed04307c37b1b2d68e70854e7ee8610ae143dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35"}
{"level":"info","ts":"2026-07-07T00:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acdcd6bd34ed167fe2b69be67eed04307c37b1b2d68e70854e7ee8610ae143dd"}
{"level":"info","ts":"2026-07-07T00:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acdcd6bd34ed167fe2b69be67eed04307c37b1b2d68e70854e7ee8610ae143dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35"}
{"level":"info","ts":"2026-07-07T00:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acdcd6bd34ed167fe2b69be67eed04307c37b1b2d68e70854e7ee8610ae143dd"}
{"level":"info","ts":"2026-07-07T00:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acdcd6bd34ed167fe2b69be67eed04307c37b1b2d68e70854e7ee8610ae143dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35"}
{"level":"debug","ts":"2026-07-07T00:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35"}
{"level":"info","ts":"2026-07-07T00:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35"}
{"level":"info","ts":"2026-07-07T00:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35"}
{"level":"error","ts":"2026-07-07T00:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15"}
{"level":"debug","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15"}
{"level":"info","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15"}
{"level":"info","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15"}
{"level":"debug","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15"}
{"level":"debug","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15"}
{"level":"debug","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15"}
{"level":"debug","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15"}
{"level":"debug","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15"}
{"level":"debug","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15"}
{"level":"debug","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15"}
{"level":"debug","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a79c957eb540b42e4c5bdb1a92efe69bd23d5879654791e64bee3648f50a0a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15"}
{"level":"info","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a79c957eb540b42e4c5bdb1a92efe69bd23d5879654791e64bee3648f50a0a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a79c957eb540b42e4c5bdb1a92efe69bd23d5879654791e64bee3648f50a0a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a79c957eb540b42e4c5bdb1a92efe69bd23d5879654791e64bee3648f50a0a0"}
{"level":"info","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a79c957eb540b42e4c5bdb1a92efe69bd23d5879654791e64bee3648f50a0a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a79c957eb540b42e4c5bdb1a92efe69bd23d5879654791e64bee3648f50a0a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0a79c957eb540b42e4c5bdb1a92efe69bd23d5879654791e64bee3648f50a0a0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0a79c957eb540b42e4c5bdb1a92efe69bd23d5879654791e64bee3648f50a0a0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a79c957eb540b42e4c5bdb1a92efe69bd23d5879654791e64bee3648f50a0a0"}
{"level":"info","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a79c957eb540b42e4c5bdb1a92efe69bd23d5879654791e64bee3648f50a0a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a79c957eb540b42e4c5bdb1a92efe69bd23d5879654791e64bee3648f50a0a0"}
{"level":"info","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15"}
{"level":"debug","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a79c957eb540b42e4c5bdb1a92efe69bd23d5879654791e64bee3648f50a0a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a79c957eb540b42e4c5bdb1a92efe69bd23d5879654791e64bee3648f50a0a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a79c957eb540b42e4c5bdb1a92efe69bd23d5879654791e64bee3648f50a0a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a79c957eb540b42e4c5bdb1a92efe69bd23d5879654791e64bee3648f50a0a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a79c957eb540b42e4c5bdb1a92efe69bd23d5879654791e64bee3648f50a0a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a79c957eb540b42e4c5bdb1a92efe69bd23d5879654791e64bee3648f50a0a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a79c957eb540b42e4c5bdb1a92efe69bd23d5879654791e64bee3648f50a0a0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a79c957eb540b42e4c5bdb1a92efe69bd23d5879654791e64bee3648f50a0a0"}
{"level":"debug","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a79c957eb540b42e4c5bdb1a92efe69bd23d5879654791e64bee3648f50a0a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a79c957eb540b42e4c5bdb1a92efe69bd23d5879654791e64bee3648f50a0a0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a79c957eb540b42e4c5bdb1a92efe69bd23d5879654791e64bee3648f50a0a0"}
{"level":"debug","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a79c957eb540b42e4c5bdb1a92efe69bd23d5879654791e64bee3648f50a0a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a79c957eb540b42e4c5bdb1a92efe69bd23d5879654791e64bee3648f50a0a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a79c957eb540b42e4c5bdb1a92efe69bd23d5879654791e64bee3648f50a0a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a79c957eb540b42e4c5bdb1a92efe69bd23d5879654791e64bee3648f50a0a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a79c957eb540b42e4c5bdb1a92efe69bd23d5879654791e64bee3648f50a0a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a79c957eb540b42e4c5bdb1a92efe69bd23d5879654791e64bee3648f50a0a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a79c957eb540b42e4c5bdb1a92efe69bd23d5879654791e64bee3648f50a0a0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a79c957eb540b42e4c5bdb1a92efe69bd23d5879654791e64bee3648f50a0a0"}
{"level":"debug","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a79c957eb540b42e4c5bdb1a92efe69bd23d5879654791e64bee3648f50a0a0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a79c957eb540b42e4c5bdb1a92efe69bd23d5879654791e64bee3648f50a0a0"}
{"level":"debug","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a79c957eb540b42e4c5bdb1a92efe69bd23d5879654791e64bee3648f50a0a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a79c957eb540b42e4c5bdb1a92efe69bd23d5879654791e64bee3648f50a0a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a79c957eb540b42e4c5bdb1a92efe69bd23d5879654791e64bee3648f50a0a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a79c957eb540b42e4c5bdb1a92efe69bd23d5879654791e64bee3648f50a0a0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a79c957eb540b42e4c5bdb1a92efe69bd23d5879654791e64bee3648f50a0a0"}
{"level":"debug","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98"}
{"level":"debug","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98"}
{"level":"debug","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"134cce5c9dcfb4f4be40fd1baf1def4491621158c7362615764387cd5fc682db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"134cce5c9dcfb4f4be40fd1baf1def4491621158c7362615764387cd5fc682db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"134cce5c9dcfb4f4be40fd1baf1def4491621158c7362615764387cd5fc682db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"134cce5c9dcfb4f4be40fd1baf1def4491621158c7362615764387cd5fc682db","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/134cce5c9dcfb4f4be40fd1baf1def4491621158c7362615764387cd5fc682db"}
{"level":"debug","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"134cce5c9dcfb4f4be40fd1baf1def4491621158c7362615764387cd5fc682db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["134cce5c9dcfb4f4be40fd1baf1def4491621158c7362615764387cd5fc682db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98"}
{"level":"info","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"134cce5c9dcfb4f4be40fd1baf1def4491621158c7362615764387cd5fc682db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"134cce5c9dcfb4f4be40fd1baf1def4491621158c7362615764387cd5fc682db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/134cce5c9dcfb4f4be40fd1baf1def4491621158c7362615764387cd5fc682db"}
{"level":"info","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"134cce5c9dcfb4f4be40fd1baf1def4491621158c7362615764387cd5fc682db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"134cce5c9dcfb4f4be40fd1baf1def4491621158c7362615764387cd5fc682db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"134cce5c9dcfb4f4be40fd1baf1def4491621158c7362615764387cd5fc682db","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/134cce5c9dcfb4f4be40fd1baf1def4491621158c7362615764387cd5fc682db"}
{"level":"debug","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"134cce5c9dcfb4f4be40fd1baf1def4491621158c7362615764387cd5fc682db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ede48cd34fe9ace31bc6b5a928b7b2466f7d54929bd64a5c7d7e59886903cc4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/134cce5c9dcfb4f4be40fd1baf1def4491621158c7362615764387cd5fc682db"}
{"level":"info","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ede48cd34fe9ace31bc6b5a928b7b2466f7d54929bd64a5c7d7e59886903cc4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ede48cd34fe9ace31bc6b5a928b7b2466f7d54929bd64a5c7d7e59886903cc4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ede48cd34fe9ace31bc6b5a928b7b2466f7d54929bd64a5c7d7e59886903cc4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ede48cd34fe9ace31bc6b5a928b7b2466f7d54929bd64a5c7d7e59886903cc4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ede48cd34fe9ace31bc6b5a928b7b2466f7d54929bd64a5c7d7e59886903cc4f"}
{"level":"error","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ede48cd34fe9ace31bc6b5a928b7b2466f7d54929bd64a5c7d7e59886903cc4f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ede48cd34fe9ace31bc6b5a928b7b2466f7d54929bd64a5c7d7e59886903cc4f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"134cce5c9dcfb4f4be40fd1baf1def4491621158c7362615764387cd5fc682db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["134cce5c9dcfb4f4be40fd1baf1def4491621158c7362615764387cd5fc682db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"134cce5c9dcfb4f4be40fd1baf1def4491621158c7362615764387cd5fc682db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ede48cd34fe9ace31bc6b5a928b7b2466f7d54929bd64a5c7d7e59886903cc4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"134cce5c9dcfb4f4be40fd1baf1def4491621158c7362615764387cd5fc682db","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ede48cd34fe9ace31bc6b5a928b7b2466f7d54929bd64a5c7d7e59886903cc4f"}
{"level":"info","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/134cce5c9dcfb4f4be40fd1baf1def4491621158c7362615764387cd5fc682db"}
{"level":"debug","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ede48cd34fe9ace31bc6b5a928b7b2466f7d54929bd64a5c7d7e59886903cc4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ede48cd34fe9ace31bc6b5a928b7b2466f7d54929bd64a5c7d7e59886903cc4f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ede48cd34fe9ace31bc6b5a928b7b2466f7d54929bd64a5c7d7e59886903cc4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a3dd2d22032802c687cfffdf945e6b9323cb3d3fc681bd81d0f2132068d7862","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a3dd2d22032802c687cfffdf945e6b9323cb3d3fc681bd81d0f2132068d7862","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ede48cd34fe9ace31bc6b5a928b7b2466f7d54929bd64a5c7d7e59886903cc4f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a3dd2d22032802c687cfffdf945e6b9323cb3d3fc681bd81d0f2132068d7862"}
{"level":"debug","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a3dd2d22032802c687cfffdf945e6b9323cb3d3fc681bd81d0f2132068d7862","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a3dd2d22032802c687cfffdf945e6b9323cb3d3fc681bd81d0f2132068d7862"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a3dd2d22032802c687cfffdf945e6b9323cb3d3fc681bd81d0f2132068d7862","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a3dd2d22032802c687cfffdf945e6b9323cb3d3fc681bd81d0f2132068d7862","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a3dd2d22032802c687cfffdf945e6b9323cb3d3fc681bd81d0f2132068d7862"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3a3dd2d22032802c687cfffdf945e6b9323cb3d3fc681bd81d0f2132068d7862","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3a3dd2d22032802c687cfffdf945e6b9323cb3d3fc681bd81d0f2132068d7862\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a3dd2d22032802c687cfffdf945e6b9323cb3d3fc681bd81d0f2132068d7862","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ede48cd34fe9ace31bc6b5a928b7b2466f7d54929bd64a5c7d7e59886903cc4f"}
{"level":"debug","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a3dd2d22032802c687cfffdf945e6b9323cb3d3fc681bd81d0f2132068d7862","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a3dd2d22032802c687cfffdf945e6b9323cb3d3fc681bd81d0f2132068d7862","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a3dd2d22032802c687cfffdf945e6b9323cb3d3fc681bd81d0f2132068d7862","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a3dd2d22032802c687cfffdf945e6b9323cb3d3fc681bd81d0f2132068d7862","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a3dd2d22032802c687cfffdf945e6b9323cb3d3fc681bd81d0f2132068d7862"}
{"level":"debug","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a3dd2d22032802c687cfffdf945e6b9323cb3d3fc681bd81d0f2132068d7862","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a3dd2d22032802c687cfffdf945e6b9323cb3d3fc681bd81d0f2132068d7862"}
{"level":"debug","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a642b3f89e49f3d0da9ac01daf27fa17e04fcbf6f5a652c0b30cbf7e8fea6eed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a642b3f89e49f3d0da9ac01daf27fa17e04fcbf6f5a652c0b30cbf7e8fea6eed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0ec59f7464c78d5f164d573d71ffe202110624cbe2ebaea3e86a8ef3aadf72b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a642b3f89e49f3d0da9ac01daf27fa17e04fcbf6f5a652c0b30cbf7e8fea6eed"}
{"level":"info","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0ec59f7464c78d5f164d573d71ffe202110624cbe2ebaea3e86a8ef3aadf72b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a642b3f89e49f3d0da9ac01daf27fa17e04fcbf6f5a652c0b30cbf7e8fea6eed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a642b3f89e49f3d0da9ac01daf27fa17e04fcbf6f5a652c0b30cbf7e8fea6eed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a642b3f89e49f3d0da9ac01daf27fa17e04fcbf6f5a652c0b30cbf7e8fea6eed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0ec59f7464c78d5f164d573d71ffe202110624cbe2ebaea3e86a8ef3aadf72b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0ec59f7464c78d5f164d573d71ffe202110624cbe2ebaea3e86a8ef3aadf72b"}
{"level":"info","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0ec59f7464c78d5f164d573d71ffe202110624cbe2ebaea3e86a8ef3aadf72b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a3dd2d22032802c687cfffdf945e6b9323cb3d3fc681bd81d0f2132068d7862","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a3dd2d22032802c687cfffdf945e6b9323cb3d3fc681bd81d0f2132068d7862"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a642b3f89e49f3d0da9ac01daf27fa17e04fcbf6f5a652c0b30cbf7e8fea6eed"}
{"level":"info","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a3dd2d22032802c687cfffdf945e6b9323cb3d3fc681bd81d0f2132068d7862","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a642b3f89e49f3d0da9ac01daf27fa17e04fcbf6f5a652c0b30cbf7e8fea6eed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0ec59f7464c78d5f164d573d71ffe202110624cbe2ebaea3e86a8ef3aadf72b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a3dd2d22032802c687cfffdf945e6b9323cb3d3fc681bd81d0f2132068d7862","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0ec59f7464c78d5f164d573d71ffe202110624cbe2ebaea3e86a8ef3aadf72b"}
{"level":"debug","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0ec59f7464c78d5f164d573d71ffe202110624cbe2ebaea3e86a8ef3aadf72b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0ec59f7464c78d5f164d573d71ffe202110624cbe2ebaea3e86a8ef3aadf72b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0ec59f7464c78d5f164d573d71ffe202110624cbe2ebaea3e86a8ef3aadf72b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0ec59f7464c78d5f164d573d71ffe202110624cbe2ebaea3e86a8ef3aadf72b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a642b3f89e49f3d0da9ac01daf27fa17e04fcbf6f5a652c0b30cbf7e8fea6eed"}
{"level":"info","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a3dd2d22032802c687cfffdf945e6b9323cb3d3fc681bd81d0f2132068d7862"}
{"level":"info","ts":"2026-07-07T00:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0ec59f7464c78d5f164d573d71ffe202110624cbe2ebaea3e86a8ef3aadf72b"}
{"level":"debug","ts":"2026-07-07T00:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171"}
{"level":"debug","ts":"2026-07-07T00:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171"}
{"level":"debug","ts":"2026-07-07T00:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171"}
{"level":"debug","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171"}
{"level":"debug","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171"}
{"level":"debug","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171"}
{"level":"debug","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171"}
{"level":"debug","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171"}
{"level":"debug","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35e598d5ca9a4b3dfa4c96c2f2aa4eb3748d6ccf80b87f7b42db1c8afcb891a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171"}
{"level":"debug","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35e598d5ca9a4b3dfa4c96c2f2aa4eb3748d6ccf80b87f7b42db1c8afcb891a6"}
{"level":"info","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171"}
{"level":"info","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171"}
{"level":"debug","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171"}
{"level":"debug","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171"}
{"level":"debug","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c8aa48347ea2eda7a528f9eee596a4a891c60f35f923625a206336ff477eba8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c8aa48347ea2eda7a528f9eee596a4a891c60f35f923625a206336ff477eba8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c8aa48347ea2eda7a528f9eee596a4a891c60f35f923625a206336ff477eba8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c8aa48347ea2eda7a528f9eee596a4a891c60f35f923625a206336ff477eba8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c8aa48347ea2eda7a528f9eee596a4a891c60f35f923625a206336ff477eba8"}
{"level":"debug","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c8aa48347ea2eda7a528f9eee596a4a891c60f35f923625a206336ff477eba8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c8aa48347ea2eda7a528f9eee596a4a891c60f35f923625a206336ff477eba8"}
{"level":"debug","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c8aa48347ea2eda7a528f9eee596a4a891c60f35f923625a206336ff477eba8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c8aa48347ea2eda7a528f9eee596a4a891c60f35f923625a206336ff477eba8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c8aa48347ea2eda7a528f9eee596a4a891c60f35f923625a206336ff477eba8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c8aa48347ea2eda7a528f9eee596a4a891c60f35f923625a206336ff477eba8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c8aa48347ea2eda7a528f9eee596a4a891c60f35f923625a206336ff477eba8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83c8ecfe3b0c132964f3bccfc244259776fc062a97e0c86d0f6b8b60ac4cd8e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c8aa48347ea2eda7a528f9eee596a4a891c60f35f923625a206336ff477eba8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c8aa48347ea2eda7a528f9eee596a4a891c60f35f923625a206336ff477eba8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c8aa48347ea2eda7a528f9eee596a4a891c60f35f923625a206336ff477eba8"}
{"level":"debug","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c8aa48347ea2eda7a528f9eee596a4a891c60f35f923625a206336ff477eba8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c8aa48347ea2eda7a528f9eee596a4a891c60f35f923625a206336ff477eba8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83c8ecfe3b0c132964f3bccfc244259776fc062a97e0c86d0f6b8b60ac4cd8e7"}
{"level":"info","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c8aa48347ea2eda7a528f9eee596a4a891c60f35f923625a206336ff477eba8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c8aa48347ea2eda7a528f9eee596a4a891c60f35f923625a206336ff477eba8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c8aa48347ea2eda7a528f9eee596a4a891c60f35f923625a206336ff477eba8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c8aa48347ea2eda7a528f9eee596a4a891c60f35f923625a206336ff477eba8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c8aa48347ea2eda7a528f9eee596a4a891c60f35f923625a206336ff477eba8"}
{"level":"debug","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c8aa48347ea2eda7a528f9eee596a4a891c60f35f923625a206336ff477eba8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c8aa48347ea2eda7a528f9eee596a4a891c60f35f923625a206336ff477eba8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c8aa48347ea2eda7a528f9eee596a4a891c60f35f923625a206336ff477eba8"}
{"level":"debug","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a3dd2d22032802c687cfffdf945e6b9323cb3d3fc681bd81d0f2132068d7862","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a3dd2d22032802c687cfffdf945e6b9323cb3d3fc681bd81d0f2132068d7862"}
{"level":"debug","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c8aa48347ea2eda7a528f9eee596a4a891c60f35f923625a206336ff477eba8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c8aa48347ea2eda7a528f9eee596a4a891c60f35f923625a206336ff477eba8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c8aa48347ea2eda7a528f9eee596a4a891c60f35f923625a206336ff477eba8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c8aa48347ea2eda7a528f9eee596a4a891c60f35f923625a206336ff477eba8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c8aa48347ea2eda7a528f9eee596a4a891c60f35f923625a206336ff477eba8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c8aa48347ea2eda7a528f9eee596a4a891c60f35f923625a206336ff477eba8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c8aa48347ea2eda7a528f9eee596a4a891c60f35f923625a206336ff477eba8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c8aa48347ea2eda7a528f9eee596a4a891c60f35f923625a206336ff477eba8"}
{"level":"debug","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c8aa48347ea2eda7a528f9eee596a4a891c60f35f923625a206336ff477eba8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c8aa48347ea2eda7a528f9eee596a4a891c60f35f923625a206336ff477eba8"}
{"level":"debug","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c8aa48347ea2eda7a528f9eee596a4a891c60f35f923625a206336ff477eba8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c8aa48347ea2eda7a528f9eee596a4a891c60f35f923625a206336ff477eba8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c8aa48347ea2eda7a528f9eee596a4a891c60f35f923625a206336ff477eba8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c8aa48347ea2eda7a528f9eee596a4a891c60f35f923625a206336ff477eba8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c8aa48347ea2eda7a528f9eee596a4a891c60f35f923625a206336ff477eba8"}
{"level":"debug","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a79c957eb540b42e4c5bdb1a92efe69bd23d5879654791e64bee3648f50a0a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a31fa272fda1769c98b6afa3fa161ecb8225bf21bbc9a2c6d7de6a9a3ecb195","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a79c957eb540b42e4c5bdb1a92efe69bd23d5879654791e64bee3648f50a0a0"}
{"level":"info","ts":"2026-07-07T00:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a31fa272fda1769c98b6afa3fa161ecb8225bf21bbc9a2c6d7de6a9a3ecb195"}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0ec59f7464c78d5f164d573d71ffe202110624cbe2ebaea3e86a8ef3aadf72b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0ec59f7464c78d5f164d573d71ffe202110624cbe2ebaea3e86a8ef3aadf72b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0ec59f7464c78d5f164d573d71ffe202110624cbe2ebaea3e86a8ef3aadf72b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acdcd6bd34ed167fe2b69be67eed04307c37b1b2d68e70854e7ee8610ae143dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0ec59f7464c78d5f164d573d71ffe202110624cbe2ebaea3e86a8ef3aadf72b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0ec59f7464c78d5f164d573d71ffe202110624cbe2ebaea3e86a8ef3aadf72b"}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0ec59f7464c78d5f164d573d71ffe202110624cbe2ebaea3e86a8ef3aadf72b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0ec59f7464c78d5f164d573d71ffe202110624cbe2ebaea3e86a8ef3aadf72b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acdcd6bd34ed167fe2b69be67eed04307c37b1b2d68e70854e7ee8610ae143dd"}
{"level":"info","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0ec59f7464c78d5f164d573d71ffe202110624cbe2ebaea3e86a8ef3aadf72b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"134cce5c9dcfb4f4be40fd1baf1def4491621158c7362615764387cd5fc682db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0ec59f7464c78d5f164d573d71ffe202110624cbe2ebaea3e86a8ef3aadf72b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0ec59f7464c78d5f164d573d71ffe202110624cbe2ebaea3e86a8ef3aadf72b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0ec59f7464c78d5f164d573d71ffe202110624cbe2ebaea3e86a8ef3aadf72b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0ec59f7464c78d5f164d573d71ffe202110624cbe2ebaea3e86a8ef3aadf72b"}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0ec59f7464c78d5f164d573d71ffe202110624cbe2ebaea3e86a8ef3aadf72b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0ec59f7464c78d5f164d573d71ffe202110624cbe2ebaea3e86a8ef3aadf72b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0ec59f7464c78d5f164d573d71ffe202110624cbe2ebaea3e86a8ef3aadf72b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0ec59f7464c78d5f164d573d71ffe202110624cbe2ebaea3e86a8ef3aadf72b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15"}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a642b3f89e49f3d0da9ac01daf27fa17e04fcbf6f5a652c0b30cbf7e8fea6eed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/134cce5c9dcfb4f4be40fd1baf1def4491621158c7362615764387cd5fc682db"}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0ec59f7464c78d5f164d573d71ffe202110624cbe2ebaea3e86a8ef3aadf72b"}
{"level":"info","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a642b3f89e49f3d0da9ac01daf27fa17e04fcbf6f5a652c0b30cbf7e8fea6eed"}
{"level":"info","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35"}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1973c238ce79c54b7dec58cefd5b52df7cd6816cec9e88fd15735f767402b0f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1973c238ce79c54b7dec58cefd5b52df7cd6816cec9e88fd15735f767402b0f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1973c238ce79c54b7dec58cefd5b52df7cd6816cec9e88fd15735f767402b0f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ede48cd34fe9ace31bc6b5a928b7b2466f7d54929bd64a5c7d7e59886903cc4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1973c238ce79c54b7dec58cefd5b52df7cd6816cec9e88fd15735f767402b0f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1973c238ce79c54b7dec58cefd5b52df7cd6816cec9e88fd15735f767402b0f5"}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"481ae7f3dbcaf0fae9117afd6641ee726b2fff3431da674eed1e01e95dbaab7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1973c238ce79c54b7dec58cefd5b52df7cd6816cec9e88fd15735f767402b0f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1973c238ce79c54b7dec58cefd5b52df7cd6816cec9e88fd15735f767402b0f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ede48cd34fe9ace31bc6b5a928b7b2466f7d54929bd64a5c7d7e59886903cc4f"}
{"level":"info","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1973c238ce79c54b7dec58cefd5b52df7cd6816cec9e88fd15735f767402b0f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1973c238ce79c54b7dec58cefd5b52df7cd6816cec9e88fd15735f767402b0f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1973c238ce79c54b7dec58cefd5b52df7cd6816cec9e88fd15735f767402b0f5"}
{"level":"info","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1973c238ce79c54b7dec58cefd5b52df7cd6816cec9e88fd15735f767402b0f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1973c238ce79c54b7dec58cefd5b52df7cd6816cec9e88fd15735f767402b0f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1973c238ce79c54b7dec58cefd5b52df7cd6816cec9e88fd15735f767402b0f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1973c238ce79c54b7dec58cefd5b52df7cd6816cec9e88fd15735f767402b0f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1973c238ce79c54b7dec58cefd5b52df7cd6816cec9e88fd15735f767402b0f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1973c238ce79c54b7dec58cefd5b52df7cd6816cec9e88fd15735f767402b0f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1973c238ce79c54b7dec58cefd5b52df7cd6816cec9e88fd15735f767402b0f5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1973c238ce79c54b7dec58cefd5b52df7cd6816cec9e88fd15735f767402b0f5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1973c238ce79c54b7dec58cefd5b52df7cd6816cec9e88fd15735f767402b0f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/481ae7f3dbcaf0fae9117afd6641ee726b2fff3431da674eed1e01e95dbaab7a"}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1973c238ce79c54b7dec58cefd5b52df7cd6816cec9e88fd15735f767402b0f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1973c238ce79c54b7dec58cefd5b52df7cd6816cec9e88fd15735f767402b0f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cc687494a4cde53e789b7d7a2725b6fb33ac54c88bdd1696f84743104428bc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1973c238ce79c54b7dec58cefd5b52df7cd6816cec9e88fd15735f767402b0f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1973c238ce79c54b7dec58cefd5b52df7cd6816cec9e88fd15735f767402b0f5"}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1973c238ce79c54b7dec58cefd5b52df7cd6816cec9e88fd15735f767402b0f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1973c238ce79c54b7dec58cefd5b52df7cd6816cec9e88fd15735f767402b0f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1973c238ce79c54b7dec58cefd5b52df7cd6816cec9e88fd15735f767402b0f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5867ddd8ecf237e1049f06caf0f6092fbf6fab6fac91fd1fdad8d2536be59ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1973c238ce79c54b7dec58cefd5b52df7cd6816cec9e88fd15735f767402b0f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4e722edd2aab2f443c7026ef3f19b0e2865f99ebcb2c025ac3698fdc477b866","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cc687494a4cde53e789b7d7a2725b6fb33ac54c88bdd1696f84743104428bc2"}
{"level":"info","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1973c238ce79c54b7dec58cefd5b52df7cd6816cec9e88fd15735f767402b0f5"}
{"level":"info","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5867ddd8ecf237e1049f06caf0f6092fbf6fab6fac91fd1fdad8d2536be59ab"}
{"level":"info","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4e722edd2aab2f443c7026ef3f19b0e2865f99ebcb2c025ac3698fdc477b866"}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98"}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98"}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98"}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98"}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98"}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98"}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98"}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98"}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98"}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98"}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98"}
{"level":"debug","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98"}
{"level":"debug","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98"}
{"level":"debug","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98"}
{"level":"debug","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98"}
{"level":"debug","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98"}
{"level":"debug","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98"}
{"level":"debug","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98"}
{"level":"debug","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98"}
{"level":"debug","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98"}
{"level":"debug","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98"}
{"level":"debug","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98"}
{"level":"debug","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98"}
{"level":"debug","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98"}
{"level":"debug","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98"}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d27bb8e7-6a19-477a-9217-a5032a5a4000","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:38460","PortSpecifier":{"PortValue":38460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d27bb8e7-6a19-477a-9217-a5032a5a4000","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d27bb8e7-6a19-477a-9217-a5032a5a4000","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:38460","PortSpecifier":{"PortValue":38460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384358,"nanos":472846704},"http":{"id":"d27bb8e7-6a19-477a-9217-a5032a5a4000","method":"POST","headers":{":authority":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d27bb8e7-6a19-477a-9217-a5032a5a4000","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d27bb8e7-6a19-477a-9217-a5032a5a4000","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fc8ccae5-ddad-4710-accf-0400aa73fe84","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=86b40590-6f47-4ced-9711-8d70b9b7e4f0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/04fabe1aadfa"]}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d27bb8e7-6a19-477a-9217-a5032a5a4000","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/04fabe1aadfa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86b40590-6f47-4ced-9711-8d70b9b7e4f0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fc8ccae5-ddad-4710-accf-0400aa73fe84","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"481ae7f3dbcaf0fae9117afd6641ee726b2fff3431da674eed1e01e95dbaab7a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d27bb8e7-6a19-477a-9217-a5032a5a4000","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d27bb8e7-6a19-477a-9217-a5032a5a4000","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d27bb8e7-6a19-477a-9217-a5032a5a4000","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5f1a0/sub-test-model-f5f1a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d27bb8e7-6a19-477a-9217-a5032a5a4000","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d27bb8e7-6a19-477a-9217-a5032a5a4000","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d27bb8e7-6a19-477a-9217-a5032a5a4000","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d27bb8e7-6a19-477a-9217-a5032a5a4000","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d27bb8e7-6a19-477a-9217-a5032a5a4000","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8138211c-3bc9-470f-ae10-f51c73c4917a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:42344","PortSpecifier":{"PortValue":42344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8138211c-3bc9-470f-ae10-f51c73c4917a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ead650.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8138211c-3bc9-470f-ae10-f51c73c4917a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:42344","PortSpecifier":{"PortValue":42344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384358,"nanos":512171649},"http":{"id":"8138211c-3bc9-470f-ae10-f51c73c4917a","method":"POST","headers":{":authority":"e2e-shared-b-ead650.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8138211c-3bc9-470f-ae10-f51c73c4917a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8138211c-3bc9-470f-ae10-f51c73c4917a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fc8ccae5-ddad-4710-accf-0400aa73fe84","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=86b40590-6f47-4ced-9711-8d70b9b7e4f0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/04fabe1aadfa"]}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8138211c-3bc9-470f-ae10-f51c73c4917a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/04fabe1aadfa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86b40590-6f47-4ced-9711-8d70b9b7e4f0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fc8ccae5-ddad-4710-accf-0400aa73fe84","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5867ddd8ecf237e1049f06caf0f6092fbf6fab6fac91fd1fdad8d2536be59ab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ead650.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8138211c-3bc9-470f-ae10-f51c73c4917a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8138211c-3bc9-470f-ae10-f51c73c4917a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8138211c-3bc9-470f-ae10-f51c73c4917a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ead650/sub-test-model-ead650\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8138211c-3bc9-470f-ae10-f51c73c4917a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8138211c-3bc9-470f-ae10-f51c73c4917a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8138211c-3bc9-470f-ae10-f51c73c4917a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8138211c-3bc9-470f-ae10-f51c73c4917a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8138211c-3bc9-470f-ae10-f51c73c4917a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eac7bc1d-82d9-4908-9a20-4bae95c98764","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:38466","PortSpecifier":{"PortValue":38466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eac7bc1d-82d9-4908-9a20-4bae95c98764","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eac7bc1d-82d9-4908-9a20-4bae95c98764","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:38466","PortSpecifier":{"PortValue":38466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384358,"nanos":552644680},"http":{"id":"eac7bc1d-82d9-4908-9a20-4bae95c98764","method":"GET","headers":{":authority":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eac7bc1d-82d9-4908-9a20-4bae95c98764","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-12I36YiLFU9CkTYUS_43TG3J42GfLmm2CcXuUkhdpld0ORYJknoDEFplgf4Vy"}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"eac7bc1d-82d9-4908-9a20-4bae95c98764","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-12I36YiLFU9CkTYUS_43TG3J42GfLmm2CcXuUkhdpld0ORYJknoDEFplgf4Vy\"}"}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"eac7bc1d-82d9-4908-9a20-4bae95c98764","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"acf2b790-0289-407d-969c-e8aa17550304","keyName":"e2e-sub-iso-21be68","subscription":"e2e-a-only-7a46df","tenant":"e2e-shared-a-f5f1a0","userId":"acf2b790-0289-407d-969c-e8aa17550304","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eac7bc1d-82d9-4908-9a20-4bae95c98764","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eac7bc1d-82d9-4908-9a20-4bae95c98764","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eac7bc1d-82d9-4908-9a20-4bae95c98764","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eac7bc1d-82d9-4908-9a20-4bae95c98764","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5f1a0/sub-test-model-f5f1a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"eac7bc1d-82d9-4908-9a20-4bae95c98764","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eac7bc1d-82d9-4908-9a20-4bae95c98764","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eac7bc1d-82d9-4908-9a20-4bae95c98764","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-7a46df"}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eac7bc1d-82d9-4908-9a20-4bae95c98764","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eac7bc1d-82d9-4908-9a20-4bae95c98764","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eac7bc1d-82d9-4908-9a20-4bae95c98764","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a305032-47bd-4eea-a6fb-dee40873d0e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:42352","PortSpecifier":{"PortValue":42352}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0a305032-47bd-4eea-a6fb-dee40873d0e2","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-ead650.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a305032-47bd-4eea-a6fb-dee40873d0e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:42352","PortSpecifier":{"PortValue":42352}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384358,"nanos":592785873},"http":{"id":"0a305032-47bd-4eea-a6fb-dee40873d0e2","method":"GET","headers":{":authority":"e2e-shared-b-ead650.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0a305032-47bd-4eea-a6fb-dee40873d0e2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1UouDwryeRBTLsXLH_OpFuU0XZuSRl5joaruGpU3VyGBLXjBLeK1Q8MGUNrl0"}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0a305032-47bd-4eea-a6fb-dee40873d0e2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-ead650.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1UouDwryeRBTLsXLH_OpFuU0XZuSRl5joaruGpU3VyGBLXjBLeK1Q8MGUNrl0\"}"}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0a305032-47bd-4eea-a6fb-dee40873d0e2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-ead650.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a24ac34c-873a-4717-b0aa-874d3ca9ed87","keyName":"e2e-sub-iso-1101a5","subscription":"e2e-b-only-7a46df","tenant":"e2e-shared-b-ead650","userId":"a24ac34c-873a-4717-b0aa-874d3ca9ed87","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0a305032-47bd-4eea-a6fb-dee40873d0e2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a305032-47bd-4eea-a6fb-dee40873d0e2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a305032-47bd-4eea-a6fb-dee40873d0e2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a305032-47bd-4eea-a6fb-dee40873d0e2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ead650/sub-test-model-ead650\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a305032-47bd-4eea-a6fb-dee40873d0e2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a305032-47bd-4eea-a6fb-dee40873d0e2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-7a46df"}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a305032-47bd-4eea-a6fb-dee40873d0e2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0a305032-47bd-4eea-a6fb-dee40873d0e2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a305032-47bd-4eea-a6fb-dee40873d0e2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a305032-47bd-4eea-a6fb-dee40873d0e2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:32:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ade3dcf-14d1-4334-a37f-dd102e1bbfcb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:47060","PortSpecifier":{"PortValue":47060}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3ade3dcf-14d1-4334-a37f-dd102e1bbfcb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:32:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ade3dcf-14d1-4334-a37f-dd102e1bbfcb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:47060","PortSpecifier":{"PortValue":47060}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384374,"nanos":900255728},"http":{"id":"3ade3dcf-14d1-4334-a37f-dd102e1bbfcb","method":"POST","headers":{":authority":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:32:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3ade3dcf-14d1-4334-a37f-dd102e1bbfcb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:32:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3ade3dcf-14d1-4334-a37f-dd102e1bbfcb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fc8ccae5-ddad-4710-accf-0400aa73fe84","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=86b40590-6f47-4ced-9711-8d70b9b7e4f0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/04fabe1aadfa"]}}
{"level":"debug","ts":"2026-07-07T00:32:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3ade3dcf-14d1-4334-a37f-dd102e1bbfcb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/04fabe1aadfa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86b40590-6f47-4ced-9711-8d70b9b7e4f0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fc8ccae5-ddad-4710-accf-0400aa73fe84","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"481ae7f3dbcaf0fae9117afd6641ee726b2fff3431da674eed1e01e95dbaab7a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:32:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ade3dcf-14d1-4334-a37f-dd102e1bbfcb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:32:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ade3dcf-14d1-4334-a37f-dd102e1bbfcb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:32:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ade3dcf-14d1-4334-a37f-dd102e1bbfcb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5f1a0/sub-test-model-f5f1a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:32:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3ade3dcf-14d1-4334-a37f-dd102e1bbfcb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:32:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ade3dcf-14d1-4334-a37f-dd102e1bbfcb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:32:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ade3dcf-14d1-4334-a37f-dd102e1bbfcb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:32:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ade3dcf-14d1-4334-a37f-dd102e1bbfcb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:32:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ade3dcf-14d1-4334-a37f-dd102e1bbfcb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:32:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16ec71bc-7a9e-4d7d-bc98-58eb9fd8d36d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:49956","PortSpecifier":{"PortValue":49956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"16ec71bc-7a9e-4d7d-bc98-58eb9fd8d36d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ead650.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:32:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16ec71bc-7a9e-4d7d-bc98-58eb9fd8d36d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:49956","PortSpecifier":{"PortValue":49956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384374,"nanos":937194217},"http":{"id":"16ec71bc-7a9e-4d7d-bc98-58eb9fd8d36d","method":"POST","headers":{":authority":"e2e-shared-b-ead650.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:32:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"16ec71bc-7a9e-4d7d-bc98-58eb9fd8d36d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:32:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"16ec71bc-7a9e-4d7d-bc98-58eb9fd8d36d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fc8ccae5-ddad-4710-accf-0400aa73fe84","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=86b40590-6f47-4ced-9711-8d70b9b7e4f0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/04fabe1aadfa"]}}
{"level":"debug","ts":"2026-07-07T00:32:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"16ec71bc-7a9e-4d7d-bc98-58eb9fd8d36d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/04fabe1aadfa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86b40590-6f47-4ced-9711-8d70b9b7e4f0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fc8ccae5-ddad-4710-accf-0400aa73fe84","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5867ddd8ecf237e1049f06caf0f6092fbf6fab6fac91fd1fdad8d2536be59ab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ead650.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:32:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16ec71bc-7a9e-4d7d-bc98-58eb9fd8d36d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:32:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16ec71bc-7a9e-4d7d-bc98-58eb9fd8d36d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:32:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16ec71bc-7a9e-4d7d-bc98-58eb9fd8d36d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ead650/sub-test-model-ead650\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:32:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"16ec71bc-7a9e-4d7d-bc98-58eb9fd8d36d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:32:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16ec71bc-7a9e-4d7d-bc98-58eb9fd8d36d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:32:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16ec71bc-7a9e-4d7d-bc98-58eb9fd8d36d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:32:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16ec71bc-7a9e-4d7d-bc98-58eb9fd8d36d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:32:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16ec71bc-7a9e-4d7d-bc98-58eb9fd8d36d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:32:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ba21d40-31d0-4f31-aeaa-134659a5c5b1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:47076","PortSpecifier":{"PortValue":47076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5ba21d40-31d0-4f31-aeaa-134659a5c5b1","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:32:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ba21d40-31d0-4f31-aeaa-134659a5c5b1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:47076","PortSpecifier":{"PortValue":47076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384374,"nanos":977581128},"http":{"id":"5ba21d40-31d0-4f31-aeaa-134659a5c5b1","method":"POST","headers":{":authority":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:32:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5ba21d40-31d0-4f31-aeaa-134659a5c5b1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GSsQdaKatSkqXidc_FkJq1q5K2B2d5fqJeeHWEHnRKaQU0P07xIMoa1t6Xcm"}
{"level":"debug","ts":"2026-07-07T00:32:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5ba21d40-31d0-4f31-aeaa-134659a5c5b1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GSsQdaKatSkqXidc_FkJq1q5K2B2d5fqJeeHWEHnRKaQU0P07xIMoa1t6Xcm\"}"}
{"level":"debug","ts":"2026-07-07T00:32:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5ba21d40-31d0-4f31-aeaa-134659a5c5b1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a808af5f-28b3-423d-b167-fbbef0b8aa7a","keyName":"e2e-sub-iso-9aab5a","subscription":"e2e-shared-sub-de203c","tenant":"e2e-shared-a-f5f1a0","userId":"a808af5f-28b3-423d-b167-fbbef0b8aa7a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:32:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5ba21d40-31d0-4f31-aeaa-134659a5c5b1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:32:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ba21d40-31d0-4f31-aeaa-134659a5c5b1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:32:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ba21d40-31d0-4f31-aeaa-134659a5c5b1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:32:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ba21d40-31d0-4f31-aeaa-134659a5c5b1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5f1a0/sub-test-model-f5f1a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:32:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5ba21d40-31d0-4f31-aeaa-134659a5c5b1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T00:32:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ba21d40-31d0-4f31-aeaa-134659a5c5b1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:32:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ba21d40-31d0-4f31-aeaa-134659a5c5b1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-de203c"}
{"level":"debug","ts":"2026-07-07T00:32:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ba21d40-31d0-4f31-aeaa-134659a5c5b1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:32:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ba21d40-31d0-4f31-aeaa-134659a5c5b1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:32:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ba21d40-31d0-4f31-aeaa-134659a5c5b1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:32:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2ac0d5c-c6c0-9596-ab65-b90f47fa82bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:49964","PortSpecifier":{"PortValue":49964}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b2ac0d5c-c6c0-9596-ab65-b90f47fa82bd","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-ead650.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:32:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2ac0d5c-c6c0-9596-ab65-b90f47fa82bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:49964","PortSpecifier":{"PortValue":49964}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384375,"nanos":11142442},"http":{"id":"b2ac0d5c-c6c0-9596-ab65-b90f47fa82bd","method":"POST","headers":{":authority":"e2e-shared-b-ead650.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:32:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b2ac0d5c-c6c0-9596-ab65-b90f47fa82bd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-evjAiNjX8lhnbrkY_sMD3DVlGK3hCkGKIZIOvUAuuVl4M9bArgbGP5j7xdN9"}
{"level":"debug","ts":"2026-07-07T00:32:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b2ac0d5c-c6c0-9596-ab65-b90f47fa82bd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-ead650.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-evjAiNjX8lhnbrkY_sMD3DVlGK3hCkGKIZIOvUAuuVl4M9bArgbGP5j7xdN9\"}"}
{"level":"debug","ts":"2026-07-07T00:32:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b2ac0d5c-c6c0-9596-ab65-b90f47fa82bd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-ead650.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"10a03e77-1658-444d-aa2b-30677f63993d","keyName":"e2e-sub-iso-b93f17","subscription":"e2e-shared-sub-de203c","tenant":"e2e-shared-b-ead650","userId":"10a03e77-1658-444d-aa2b-30677f63993d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:32:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b2ac0d5c-c6c0-9596-ab65-b90f47fa82bd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:32:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2ac0d5c-c6c0-9596-ab65-b90f47fa82bd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:32:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2ac0d5c-c6c0-9596-ab65-b90f47fa82bd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:32:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2ac0d5c-c6c0-9596-ab65-b90f47fa82bd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ead650/sub-test-model-ead650\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:32:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2ac0d5c-c6c0-9596-ab65-b90f47fa82bd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:32:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2ac0d5c-c6c0-9596-ab65-b90f47fa82bd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:32:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2ac0d5c-c6c0-9596-ab65-b90f47fa82bd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-de203c"}
{"level":"debug","ts":"2026-07-07T00:32:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b2ac0d5c-c6c0-9596-ab65-b90f47fa82bd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-07T00:32:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2ac0d5c-c6c0-9596-ab65-b90f47fa82bd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:32:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2ac0d5c-c6c0-9596-ab65-b90f47fa82bd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4cc687494a4cde53e789b7d7a2725b6fb33ac54c88bdd1696f84743104428bc2"}
{"level":"info","ts":"2026-07-07T00:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/acdcd6bd34ed167fe2b69be67eed04307c37b1b2d68e70854e7ee8610ae143dd"}
{"level":"info","ts":"2026-07-07T00:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35e598d5ca9a4b3dfa4c96c2f2aa4eb3748d6ccf80b87f7b42db1c8afcb891a6"}
{"level":"info","ts":"2026-07-07T00:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d4e722edd2aab2f443c7026ef3f19b0e2865f99ebcb2c025ac3698fdc477b866"}
{"level":"info","ts":"2026-07-07T00:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1973c238ce79c54b7dec58cefd5b52df7cd6816cec9e88fd15735f767402b0f5"}
{"level":"info","ts":"2026-07-07T00:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57a853728e1792f05e7553b39228db2ac42e384227ed7cfe5ee5563033c39e35"}
{"level":"info","ts":"2026-07-07T00:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c8aa48347ea2eda7a528f9eee596a4a891c60f35f923625a206336ff477eba8"}
{"level":"info","ts":"2026-07-07T00:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5a31fa272fda1769c98b6afa3fa161ecb8225bf21bbc9a2c6d7de6a9a3ecb195"}
{"level":"debug","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b2db7b2b5b29c8a56185ea889918fee66b1e6ad456ee35a5821e0c6284376ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b2db7b2b5b29c8a56185ea889918fee66b1e6ad456ee35a5821e0c6284376ed"}
{"level":"info","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b2db7b2b5b29c8a56185ea889918fee66b1e6ad456ee35a5821e0c6284376ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b2db7b2b5b29c8a56185ea889918fee66b1e6ad456ee35a5821e0c6284376ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b2db7b2b5b29c8a56185ea889918fee66b1e6ad456ee35a5821e0c6284376ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b2db7b2b5b29c8a56185ea889918fee66b1e6ad456ee35a5821e0c6284376ed"}
{"level":"info","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b2db7b2b5b29c8a56185ea889918fee66b1e6ad456ee35a5821e0c6284376ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b2db7b2b5b29c8a56185ea889918fee66b1e6ad456ee35a5821e0c6284376ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b2db7b2b5b29c8a56185ea889918fee66b1e6ad456ee35a5821e0c6284376ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5b2db7b2b5b29c8a56185ea889918fee66b1e6ad456ee35a5821e0c6284376ed","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5b2db7b2b5b29c8a56185ea889918fee66b1e6ad456ee35a5821e0c6284376ed\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b2db7b2b5b29c8a56185ea889918fee66b1e6ad456ee35a5821e0c6284376ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b2db7b2b5b29c8a56185ea889918fee66b1e6ad456ee35a5821e0c6284376ed"}
{"level":"info","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b2db7b2b5b29c8a56185ea889918fee66b1e6ad456ee35a5821e0c6284376ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b2db7b2b5b29c8a56185ea889918fee66b1e6ad456ee35a5821e0c6284376ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b2db7b2b5b29c8a56185ea889918fee66b1e6ad456ee35a5821e0c6284376ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b2db7b2b5b29c8a56185ea889918fee66b1e6ad456ee35a5821e0c6284376ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b2db7b2b5b29c8a56185ea889918fee66b1e6ad456ee35a5821e0c6284376ed"}
{"level":"info","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b2db7b2b5b29c8a56185ea889918fee66b1e6ad456ee35a5821e0c6284376ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b2db7b2b5b29c8a56185ea889918fee66b1e6ad456ee35a5821e0c6284376ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b2db7b2b5b29c8a56185ea889918fee66b1e6ad456ee35a5821e0c6284376ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b2db7b2b5b29c8a56185ea889918fee66b1e6ad456ee35a5821e0c6284376ed"}
{"level":"error","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5b2db7b2b5b29c8a56185ea889918fee66b1e6ad456ee35a5821e0c6284376ed","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5b2db7b2b5b29c8a56185ea889918fee66b1e6ad456ee35a5821e0c6284376ed\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b2db7b2b5b29c8a56185ea889918fee66b1e6ad456ee35a5821e0c6284376ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b2db7b2b5b29c8a56185ea889918fee66b1e6ad456ee35a5821e0c6284376ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a39bb15b49cc73a1b30402dbd484b4ca8ec65b6670a5a25d5bb41d2d2342ebc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a39bb15b49cc73a1b30402dbd484b4ca8ec65b6670a5a25d5bb41d2d2342ebc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a39bb15b49cc73a1b30402dbd484b4ca8ec65b6670a5a25d5bb41d2d2342ebc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a39bb15b49cc73a1b30402dbd484b4ca8ec65b6670a5a25d5bb41d2d2342ebc4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a39bb15b49cc73a1b30402dbd484b4ca8ec65b6670a5a25d5bb41d2d2342ebc4"}
{"level":"debug","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a39bb15b49cc73a1b30402dbd484b4ca8ec65b6670a5a25d5bb41d2d2342ebc4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a39bb15b49cc73a1b30402dbd484b4ca8ec65b6670a5a25d5bb41d2d2342ebc4"}
{"level":"debug","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a39bb15b49cc73a1b30402dbd484b4ca8ec65b6670a5a25d5bb41d2d2342ebc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a39bb15b49cc73a1b30402dbd484b4ca8ec65b6670a5a25d5bb41d2d2342ebc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a39bb15b49cc73a1b30402dbd484b4ca8ec65b6670a5a25d5bb41d2d2342ebc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a39bb15b49cc73a1b30402dbd484b4ca8ec65b6670a5a25d5bb41d2d2342ebc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a39bb15b49cc73a1b30402dbd484b4ca8ec65b6670a5a25d5bb41d2d2342ebc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bff52ea842e55b6b6960fa133b5318a0eaffb537797a06e7cd9aa74a8770fdf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a39bb15b49cc73a1b30402dbd484b4ca8ec65b6670a5a25d5bb41d2d2342ebc4"}
{"level":"info","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bff52ea842e55b6b6960fa133b5318a0eaffb537797a06e7cd9aa74a8770fdf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a39bb15b49cc73a1b30402dbd484b4ca8ec65b6670a5a25d5bb41d2d2342ebc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a39bb15b49cc73a1b30402dbd484b4ca8ec65b6670a5a25d5bb41d2d2342ebc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a39bb15b49cc73a1b30402dbd484b4ca8ec65b6670a5a25d5bb41d2d2342ebc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bff52ea842e55b6b6960fa133b5318a0eaffb537797a06e7cd9aa74a8770fdf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bff52ea842e55b6b6960fa133b5318a0eaffb537797a06e7cd9aa74a8770fdf6"}
{"level":"info","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bff52ea842e55b6b6960fa133b5318a0eaffb537797a06e7cd9aa74a8770fdf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a39bb15b49cc73a1b30402dbd484b4ca8ec65b6670a5a25d5bb41d2d2342ebc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a39bb15b49cc73a1b30402dbd484b4ca8ec65b6670a5a25d5bb41d2d2342ebc4"}
{"level":"info","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a39bb15b49cc73a1b30402dbd484b4ca8ec65b6670a5a25d5bb41d2d2342ebc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bff52ea842e55b6b6960fa133b5318a0eaffb537797a06e7cd9aa74a8770fdf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a39bb15b49cc73a1b30402dbd484b4ca8ec65b6670a5a25d5bb41d2d2342ebc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a39bb15b49cc73a1b30402dbd484b4ca8ec65b6670a5a25d5bb41d2d2342ebc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a39bb15b49cc73a1b30402dbd484b4ca8ec65b6670a5a25d5bb41d2d2342ebc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a39bb15b49cc73a1b30402dbd484b4ca8ec65b6670a5a25d5bb41d2d2342ebc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a39bb15b49cc73a1b30402dbd484b4ca8ec65b6670a5a25d5bb41d2d2342ebc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bff52ea842e55b6b6960fa133b5318a0eaffb537797a06e7cd9aa74a8770fdf6"}
{"level":"error","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a39bb15b49cc73a1b30402dbd484b4ca8ec65b6670a5a25d5bb41d2d2342ebc4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a39bb15b49cc73a1b30402dbd484b4ca8ec65b6670a5a25d5bb41d2d2342ebc4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bff52ea842e55b6b6960fa133b5318a0eaffb537797a06e7cd9aa74a8770fdf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bff52ea842e55b6b6960fa133b5318a0eaffb537797a06e7cd9aa74a8770fdf6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bff52ea842e55b6b6960fa133b5318a0eaffb537797a06e7cd9aa74a8770fdf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a39bb15b49cc73a1b30402dbd484b4ca8ec65b6670a5a25d5bb41d2d2342ebc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a39bb15b49cc73a1b30402dbd484b4ca8ec65b6670a5a25d5bb41d2d2342ebc4"}
{"level":"info","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a39bb15b49cc73a1b30402dbd484b4ca8ec65b6670a5a25d5bb41d2d2342ebc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bff52ea842e55b6b6960fa133b5318a0eaffb537797a06e7cd9aa74a8770fdf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bff52ea842e55b6b6960fa133b5318a0eaffb537797a06e7cd9aa74a8770fdf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec5ea8b62d4feb7edd322eeffd6bf139bb783d7ae92550376f0544d25b6cc32c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bff52ea842e55b6b6960fa133b5318a0eaffb537797a06e7cd9aa74a8770fdf6"}
{"level":"info","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec5ea8b62d4feb7edd322eeffd6bf139bb783d7ae92550376f0544d25b6cc32c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a39bb15b49cc73a1b30402dbd484b4ca8ec65b6670a5a25d5bb41d2d2342ebc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a39bb15b49cc73a1b30402dbd484b4ca8ec65b6670a5a25d5bb41d2d2342ebc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec5ea8b62d4feb7edd322eeffd6bf139bb783d7ae92550376f0544d25b6cc32c"}
{"level":"info","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a39bb15b49cc73a1b30402dbd484b4ca8ec65b6670a5a25d5bb41d2d2342ebc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bff52ea842e55b6b6960fa133b5318a0eaffb537797a06e7cd9aa74a8770fdf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bff52ea842e55b6b6960fa133b5318a0eaffb537797a06e7cd9aa74a8770fdf6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bff52ea842e55b6b6960fa133b5318a0eaffb537797a06e7cd9aa74a8770fdf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec5ea8b62d4feb7edd322eeffd6bf139bb783d7ae92550376f0544d25b6cc32c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec5ea8b62d4feb7edd322eeffd6bf139bb783d7ae92550376f0544d25b6cc32c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a39bb15b49cc73a1b30402dbd484b4ca8ec65b6670a5a25d5bb41d2d2342ebc4"}
{"level":"info","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec5ea8b62d4feb7edd322eeffd6bf139bb783d7ae92550376f0544d25b6cc32c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a39bb15b49cc73a1b30402dbd484b4ca8ec65b6670a5a25d5bb41d2d2342ebc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bff52ea842e55b6b6960fa133b5318a0eaffb537797a06e7cd9aa74a8770fdf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bff52ea842e55b6b6960fa133b5318a0eaffb537797a06e7cd9aa74a8770fdf6"}
{"level":"info","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bff52ea842e55b6b6960fa133b5318a0eaffb537797a06e7cd9aa74a8770fdf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec5ea8b62d4feb7edd322eeffd6bf139bb783d7ae92550376f0544d25b6cc32c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec5ea8b62d4feb7edd322eeffd6bf139bb783d7ae92550376f0544d25b6cc32c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bff52ea842e55b6b6960fa133b5318a0eaffb537797a06e7cd9aa74a8770fdf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bff52ea842e55b6b6960fa133b5318a0eaffb537797a06e7cd9aa74a8770fdf6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec5ea8b62d4feb7edd322eeffd6bf139bb783d7ae92550376f0544d25b6cc32c"}
{"level":"info","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bff52ea842e55b6b6960fa133b5318a0eaffb537797a06e7cd9aa74a8770fdf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec5ea8b62d4feb7edd322eeffd6bf139bb783d7ae92550376f0544d25b6cc32c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec5ea8b62d4feb7edd322eeffd6bf139bb783d7ae92550376f0544d25b6cc32c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec5ea8b62d4feb7edd322eeffd6bf139bb783d7ae92550376f0544d25b6cc32c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bff52ea842e55b6b6960fa133b5318a0eaffb537797a06e7cd9aa74a8770fdf6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a39bb15b49cc73a1b30402dbd484b4ca8ec65b6670a5a25d5bb41d2d2342ebc4"}
{"level":"debug","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec5ea8b62d4feb7edd322eeffd6bf139bb783d7ae92550376f0544d25b6cc32c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bff52ea842e55b6b6960fa133b5318a0eaffb537797a06e7cd9aa74a8770fdf6"}
{"level":"info","ts":"2026-07-07T00:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec5ea8b62d4feb7edd322eeffd6bf139bb783d7ae92550376f0544d25b6cc32c"}
{"level":"debug","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75def7913fb5298803a0b175987351385dde5152b59d250614dae8a6561b2008","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75def7913fb5298803a0b175987351385dde5152b59d250614dae8a6561b2008"}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75def7913fb5298803a0b175987351385dde5152b59d250614dae8a6561b2008","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75def7913fb5298803a0b175987351385dde5152b59d250614dae8a6561b2008","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75def7913fb5298803a0b175987351385dde5152b59d250614dae8a6561b2008","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75def7913fb5298803a0b175987351385dde5152b59d250614dae8a6561b2008","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75def7913fb5298803a0b175987351385dde5152b59d250614dae8a6561b2008"}
{"level":"error","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"75def7913fb5298803a0b175987351385dde5152b59d250614dae8a6561b2008","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"75def7913fb5298803a0b175987351385dde5152b59d250614dae8a6561b2008\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75def7913fb5298803a0b175987351385dde5152b59d250614dae8a6561b2008","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75def7913fb5298803a0b175987351385dde5152b59d250614dae8a6561b2008"}
{"level":"debug","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75def7913fb5298803a0b175987351385dde5152b59d250614dae8a6561b2008","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75def7913fb5298803a0b175987351385dde5152b59d250614dae8a6561b2008"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75def7913fb5298803a0b175987351385dde5152b59d250614dae8a6561b2008","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb02681096f28a0fbdeb510f27dd1be8c791ef8beefdd95e988fccc5acda9bf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb02681096f28a0fbdeb510f27dd1be8c791ef8beefdd95e988fccc5acda9bf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75def7913fb5298803a0b175987351385dde5152b59d250614dae8a6561b2008","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb02681096f28a0fbdeb510f27dd1be8c791ef8beefdd95e988fccc5acda9bf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb02681096f28a0fbdeb510f27dd1be8c791ef8beefdd95e988fccc5acda9bf4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb02681096f28a0fbdeb510f27dd1be8c791ef8beefdd95e988fccc5acda9bf4"}
{"level":"debug","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb02681096f28a0fbdeb510f27dd1be8c791ef8beefdd95e988fccc5acda9bf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb02681096f28a0fbdeb510f27dd1be8c791ef8beefdd95e988fccc5acda9bf4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb02681096f28a0fbdeb510f27dd1be8c791ef8beefdd95e988fccc5acda9bf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb02681096f28a0fbdeb510f27dd1be8c791ef8beefdd95e988fccc5acda9bf4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75def7913fb5298803a0b175987351385dde5152b59d250614dae8a6561b2008"}
{"level":"debug","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b980ae0228c868c16dc153599e9d03126d6eb445282564ee372c5b334f46abd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb02681096f28a0fbdeb510f27dd1be8c791ef8beefdd95e988fccc5acda9bf4"}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b980ae0228c868c16dc153599e9d03126d6eb445282564ee372c5b334f46abd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b980ae0228c868c16dc153599e9d03126d6eb445282564ee372c5b334f46abd"}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b980ae0228c868c16dc153599e9d03126d6eb445282564ee372c5b334f46abd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b980ae0228c868c16dc153599e9d03126d6eb445282564ee372c5b334f46abd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84"}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b980ae0228c868c16dc153599e9d03126d6eb445282564ee372c5b334f46abd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b980ae0228c868c16dc153599e9d03126d6eb445282564ee372c5b334f46abd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b980ae0228c868c16dc153599e9d03126d6eb445282564ee372c5b334f46abd"}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b980ae0228c868c16dc153599e9d03126d6eb445282564ee372c5b334f46abd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b980ae0228c868c16dc153599e9d03126d6eb445282564ee372c5b334f46abd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b980ae0228c868c16dc153599e9d03126d6eb445282564ee372c5b334f46abd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84"}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b980ae0228c868c16dc153599e9d03126d6eb445282564ee372c5b334f46abd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b980ae0228c868c16dc153599e9d03126d6eb445282564ee372c5b334f46abd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b980ae0228c868c16dc153599e9d03126d6eb445282564ee372c5b334f46abd"}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/afb8b8b2a4e83667a2cabafba73f44b771e43ad42321c9c750971b05bda57f98"}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b980ae0228c868c16dc153599e9d03126d6eb445282564ee372c5b334f46abd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b980ae0228c868c16dc153599e9d03126d6eb445282564ee372c5b334f46abd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b980ae0228c868c16dc153599e9d03126d6eb445282564ee372c5b334f46abd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84"}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a79c957eb540b42e4c5bdb1a92efe69bd23d5879654791e64bee3648f50a0a0"}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/134cce5c9dcfb4f4be40fd1baf1def4491621158c7362615764387cd5fc682db"}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/24b4dd889a228e28eacb7a08d009c3431d1f77c312014e1d6f4c783ecdf66f15"}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b980ae0228c868c16dc153599e9d03126d6eb445282564ee372c5b334f46abd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b980ae0228c868c16dc153599e9d03126d6eb445282564ee372c5b334f46abd"}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a3dd2d22032802c687cfffdf945e6b9323cb3d3fc681bd81d0f2132068d7862"}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ede48cd34fe9ace31bc6b5a928b7b2466f7d54929bd64a5c7d7e59886903cc4f"}
{"level":"debug","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b980ae0228c868c16dc153599e9d03126d6eb445282564ee372c5b334f46abd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84"}
{"level":"debug","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b980ae0228c868c16dc153599e9d03126d6eb445282564ee372c5b334f46abd"}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a642b3f89e49f3d0da9ac01daf27fa17e04fcbf6f5a652c0b30cbf7e8fea6eed"}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0ec59f7464c78d5f164d573d71ffe202110624cbe2ebaea3e86a8ef3aadf72b"}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84"}
{"level":"debug","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84"}
{"level":"debug","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84"}
{"level":"debug","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84"}
{"level":"debug","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84"}
{"level":"debug","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84"}
{"level":"debug","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84"}
{"level":"debug","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84"}
{"level":"debug","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84"}
{"level":"debug","ts":"2026-07-07T00:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1"}
{"level":"info","ts":"2026-07-07T00:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T00:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1"}
{"level":"info","ts":"2026-07-07T00:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1"}
{"level":"debug","ts":"2026-07-07T00:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1"}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8757d990451d57af2f733fb4345dbd27a3ba089f83033bda83749b535ffacd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8757d990451d57af2f733fb4345dbd27a3ba089f83033bda83749b535ffacd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8757d990451d57af2f733fb4345dbd27a3ba089f83033bda83749b535ffacd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8757d990451d57af2f733fb4345dbd27a3ba089f83033bda83749b535ffacd0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8757d990451d57af2f733fb4345dbd27a3ba089f83033bda83749b535ffacd0"}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8757d990451d57af2f733fb4345dbd27a3ba089f83033bda83749b535ffacd0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8757d990451d57af2f733fb4345dbd27a3ba089f83033bda83749b535ffacd0"}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8757d990451d57af2f733fb4345dbd27a3ba089f83033bda83749b535ffacd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8757d990451d57af2f733fb4345dbd27a3ba089f83033bda83749b535ffacd0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8757d990451d57af2f733fb4345dbd27a3ba089f83033bda83749b535ffacd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8757d990451d57af2f733fb4345dbd27a3ba089f83033bda83749b535ffacd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aec3ffdc2ea8ca932a99366a2b87545e70dec461c257f53fb9d24308225a6d05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aec3ffdc2ea8ca932a99366a2b87545e70dec461c257f53fb9d24308225a6d05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aec3ffdc2ea8ca932a99366a2b87545e70dec461c257f53fb9d24308225a6d05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aec3ffdc2ea8ca932a99366a2b87545e70dec461c257f53fb9d24308225a6d05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ece48617aecd296b27546f1d51eedbcdc936d297a2288e2d69628d655fc9c9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8757d990451d57af2f733fb4345dbd27a3ba089f83033bda83749b535ffacd0"}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ece48617aecd296b27546f1d51eedbcdc936d297a2288e2d69628d655fc9c9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ece48617aecd296b27546f1d51eedbcdc936d297a2288e2d69628d655fc9c9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aec3ffdc2ea8ca932a99366a2b87545e70dec461c257f53fb9d24308225a6d05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aec3ffdc2ea8ca932a99366a2b87545e70dec461c257f53fb9d24308225a6d05"}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aec3ffdc2ea8ca932a99366a2b87545e70dec461c257f53fb9d24308225a6d05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ece48617aecd296b27546f1d51eedbcdc936d297a2288e2d69628d655fc9c9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ece48617aecd296b27546f1d51eedbcdc936d297a2288e2d69628d655fc9c9c"}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ece48617aecd296b27546f1d51eedbcdc936d297a2288e2d69628d655fc9c9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aec3ffdc2ea8ca932a99366a2b87545e70dec461c257f53fb9d24308225a6d05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ece48617aecd296b27546f1d51eedbcdc936d297a2288e2d69628d655fc9c9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ece48617aecd296b27546f1d51eedbcdc936d297a2288e2d69628d655fc9c9c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ece48617aecd296b27546f1d51eedbcdc936d297a2288e2d69628d655fc9c9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ece48617aecd296b27546f1d51eedbcdc936d297a2288e2d69628d655fc9c9c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aec3ffdc2ea8ca932a99366a2b87545e70dec461c257f53fb9d24308225a6d05"}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ece48617aecd296b27546f1d51eedbcdc936d297a2288e2d69628d655fc9c9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ece48617aecd296b27546f1d51eedbcdc936d297a2288e2d69628d655fc9c9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aec3ffdc2ea8ca932a99366a2b87545e70dec461c257f53fb9d24308225a6d05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aec3ffdc2ea8ca932a99366a2b87545e70dec461c257f53fb9d24308225a6d05"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ece48617aecd296b27546f1d51eedbcdc936d297a2288e2d69628d655fc9c9c"}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aec3ffdc2ea8ca932a99366a2b87545e70dec461c257f53fb9d24308225a6d05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ece48617aecd296b27546f1d51eedbcdc936d297a2288e2d69628d655fc9c9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11a6fa754a17a588e24931631b9cdd0f6c9188d2d9eff645a65fefaae1cdb4e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11a6fa754a17a588e24931631b9cdd0f6c9188d2d9eff645a65fefaae1cdb4e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aec3ffdc2ea8ca932a99366a2b87545e70dec461c257f53fb9d24308225a6d05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b85ea50ee942f24e41b39a0bdda92280dbfe6bae8f5624c7a1743bb0dee8145b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ece48617aecd296b27546f1d51eedbcdc936d297a2288e2d69628d655fc9c9c"}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b85ea50ee942f24e41b39a0bdda92280dbfe6bae8f5624c7a1743bb0dee8145b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ece48617aecd296b27546f1d51eedbcdc936d297a2288e2d69628d655fc9c9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ece48617aecd296b27546f1d51eedbcdc936d297a2288e2d69628d655fc9c9c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11a6fa754a17a588e24931631b9cdd0f6c9188d2d9eff645a65fefaae1cdb4e1"}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ece48617aecd296b27546f1d51eedbcdc936d297a2288e2d69628d655fc9c9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11a6fa754a17a588e24931631b9cdd0f6c9188d2d9eff645a65fefaae1cdb4e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11a6fa754a17a588e24931631b9cdd0f6c9188d2d9eff645a65fefaae1cdb4e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aec3ffdc2ea8ca932a99366a2b87545e70dec461c257f53fb9d24308225a6d05"}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11a6fa754a17a588e24931631b9cdd0f6c9188d2d9eff645a65fefaae1cdb4e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b85ea50ee942f24e41b39a0bdda92280dbfe6bae8f5624c7a1743bb0dee8145b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b85ea50ee942f24e41b39a0bdda92280dbfe6bae8f5624c7a1743bb0dee8145b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ece48617aecd296b27546f1d51eedbcdc936d297a2288e2d69628d655fc9c9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11a6fa754a17a588e24931631b9cdd0f6c9188d2d9eff645a65fefaae1cdb4e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b85ea50ee942f24e41b39a0bdda92280dbfe6bae8f5624c7a1743bb0dee8145b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b85ea50ee942f24e41b39a0bdda92280dbfe6bae8f5624c7a1743bb0dee8145b"}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b85ea50ee942f24e41b39a0bdda92280dbfe6bae8f5624c7a1743bb0dee8145b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b85ea50ee942f24e41b39a0bdda92280dbfe6bae8f5624c7a1743bb0dee8145b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ece48617aecd296b27546f1d51eedbcdc936d297a2288e2d69628d655fc9c9c"}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b85ea50ee942f24e41b39a0bdda92280dbfe6bae8f5624c7a1743bb0dee8145b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b85ea50ee942f24e41b39a0bdda92280dbfe6bae8f5624c7a1743bb0dee8145b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11a6fa754a17a588e24931631b9cdd0f6c9188d2d9eff645a65fefaae1cdb4e1"}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b85ea50ee942f24e41b39a0bdda92280dbfe6bae8f5624c7a1743bb0dee8145b"}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"596539ea4b853744656d4cd835aed4b099ac12a17a86b20758099243733b8304","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"596539ea4b853744656d4cd835aed4b099ac12a17a86b20758099243733b8304","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"596539ea4b853744656d4cd835aed4b099ac12a17a86b20758099243733b8304","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"596539ea4b853744656d4cd835aed4b099ac12a17a86b20758099243733b8304","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/596539ea4b853744656d4cd835aed4b099ac12a17a86b20758099243733b8304"}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"596539ea4b853744656d4cd835aed4b099ac12a17a86b20758099243733b8304","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/596539ea4b853744656d4cd835aed4b099ac12a17a86b20758099243733b8304"}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"596539ea4b853744656d4cd835aed4b099ac12a17a86b20758099243733b8304","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["596539ea4b853744656d4cd835aed4b099ac12a17a86b20758099243733b8304"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"596539ea4b853744656d4cd835aed4b099ac12a17a86b20758099243733b8304","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"596539ea4b853744656d4cd835aed4b099ac12a17a86b20758099243733b8304","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"596539ea4b853744656d4cd835aed4b099ac12a17a86b20758099243733b8304","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/596539ea4b853744656d4cd835aed4b099ac12a17a86b20758099243733b8304"}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"596539ea4b853744656d4cd835aed4b099ac12a17a86b20758099243733b8304","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["596539ea4b853744656d4cd835aed4b099ac12a17a86b20758099243733b8304"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"596539ea4b853744656d4cd835aed4b099ac12a17a86b20758099243733b8304","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9"}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"596539ea4b853744656d4cd835aed4b099ac12a17a86b20758099243733b8304","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/596539ea4b853744656d4cd835aed4b099ac12a17a86b20758099243733b8304"}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"596539ea4b853744656d4cd835aed4b099ac12a17a86b20758099243733b8304","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"596539ea4b853744656d4cd835aed4b099ac12a17a86b20758099243733b8304","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["596539ea4b853744656d4cd835aed4b099ac12a17a86b20758099243733b8304"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"596539ea4b853744656d4cd835aed4b099ac12a17a86b20758099243733b8304","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"596539ea4b853744656d4cd835aed4b099ac12a17a86b20758099243733b8304","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["596539ea4b853744656d4cd835aed4b099ac12a17a86b20758099243733b8304"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9"}
{"level":"error","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"596539ea4b853744656d4cd835aed4b099ac12a17a86b20758099243733b8304","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"596539ea4b853744656d4cd835aed4b099ac12a17a86b20758099243733b8304\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/596539ea4b853744656d4cd835aed4b099ac12a17a86b20758099243733b8304"}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"596539ea4b853744656d4cd835aed4b099ac12a17a86b20758099243733b8304","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9"}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9"}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9"}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9"}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9"}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9"}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9"}
{"level":"debug","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9"}
{"level":"debug","ts":"2026-07-07T00:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9"}
{"level":"debug","ts":"2026-07-07T00:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9"}
{"level":"debug","ts":"2026-07-07T00:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9"}
{"level":"debug","ts":"2026-07-07T00:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9"}
{"level":"debug","ts":"2026-07-07T00:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9"}
{"level":"info","ts":"2026-07-07T00:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9"}
{"level":"debug","ts":"2026-07-07T00:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9"}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ece48617aecd296b27546f1d51eedbcdc936d297a2288e2d69628d655fc9c9c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ece48617aecd296b27546f1d51eedbcdc936d297a2288e2d69628d655fc9c9c"}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1"}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1"}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11a6fa754a17a588e24931631b9cdd0f6c9188d2d9eff645a65fefaae1cdb4e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1"}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11a6fa754a17a588e24931631b9cdd0f6c9188d2d9eff645a65fefaae1cdb4e1"}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1"}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1"}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a39bb15b49cc73a1b30402dbd484b4ca8ec65b6670a5a25d5bb41d2d2342ebc4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1"}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a39bb15b49cc73a1b30402dbd484b4ca8ec65b6670a5a25d5bb41d2d2342ebc4"}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1"}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1"}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"481ae7f3dbcaf0fae9117afd6641ee726b2fff3431da674eed1e01e95dbaab7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"481ae7f3dbcaf0fae9117afd6641ee726b2fff3431da674eed1e01e95dbaab7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"481ae7f3dbcaf0fae9117afd6641ee726b2fff3431da674eed1e01e95dbaab7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"481ae7f3dbcaf0fae9117afd6641ee726b2fff3431da674eed1e01e95dbaab7a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/481ae7f3dbcaf0fae9117afd6641ee726b2fff3431da674eed1e01e95dbaab7a"}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"481ae7f3dbcaf0fae9117afd6641ee726b2fff3431da674eed1e01e95dbaab7a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/481ae7f3dbcaf0fae9117afd6641ee726b2fff3431da674eed1e01e95dbaab7a"}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1"}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"481ae7f3dbcaf0fae9117afd6641ee726b2fff3431da674eed1e01e95dbaab7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["481ae7f3dbcaf0fae9117afd6641ee726b2fff3431da674eed1e01e95dbaab7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"481ae7f3dbcaf0fae9117afd6641ee726b2fff3431da674eed1e01e95dbaab7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec5ea8b62d4feb7edd322eeffd6bf139bb783d7ae92550376f0544d25b6cc32c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec5ea8b62d4feb7edd322eeffd6bf139bb783d7ae92550376f0544d25b6cc32c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"481ae7f3dbcaf0fae9117afd6641ee726b2fff3431da674eed1e01e95dbaab7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec5ea8b62d4feb7edd322eeffd6bf139bb783d7ae92550376f0544d25b6cc32c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec5ea8b62d4feb7edd322eeffd6bf139bb783d7ae92550376f0544d25b6cc32c"}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec5ea8b62d4feb7edd322eeffd6bf139bb783d7ae92550376f0544d25b6cc32c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec5ea8b62d4feb7edd322eeffd6bf139bb783d7ae92550376f0544d25b6cc32c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec5ea8b62d4feb7edd322eeffd6bf139bb783d7ae92550376f0544d25b6cc32c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec5ea8b62d4feb7edd322eeffd6bf139bb783d7ae92550376f0544d25b6cc32c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/481ae7f3dbcaf0fae9117afd6641ee726b2fff3431da674eed1e01e95dbaab7a"}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec5ea8b62d4feb7edd322eeffd6bf139bb783d7ae92550376f0544d25b6cc32c"}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8757d990451d57af2f733fb4345dbd27a3ba089f83033bda83749b535ffacd0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8757d990451d57af2f733fb4345dbd27a3ba089f83033bda83749b535ffacd0"}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9"}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"596539ea4b853744656d4cd835aed4b099ac12a17a86b20758099243733b8304","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171"}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/596539ea4b853744656d4cd835aed4b099ac12a17a86b20758099243733b8304"}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bff52ea842e55b6b6960fa133b5318a0eaffb537797a06e7cd9aa74a8770fdf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bff52ea842e55b6b6960fa133b5318a0eaffb537797a06e7cd9aa74a8770fdf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bff52ea842e55b6b6960fa133b5318a0eaffb537797a06e7cd9aa74a8770fdf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bff52ea842e55b6b6960fa133b5318a0eaffb537797a06e7cd9aa74a8770fdf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b85ea50ee942f24e41b39a0bdda92280dbfe6bae8f5624c7a1743bb0dee8145b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bff52ea842e55b6b6960fa133b5318a0eaffb537797a06e7cd9aa74a8770fdf6"}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b2db7b2b5b29c8a56185ea889918fee66b1e6ad456ee35a5821e0c6284376ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bff52ea842e55b6b6960fa133b5318a0eaffb537797a06e7cd9aa74a8770fdf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bff52ea842e55b6b6960fa133b5318a0eaffb537797a06e7cd9aa74a8770fdf6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b85ea50ee942f24e41b39a0bdda92280dbfe6bae8f5624c7a1743bb0dee8145b"}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bff52ea842e55b6b6960fa133b5318a0eaffb537797a06e7cd9aa74a8770fdf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b980ae0228c868c16dc153599e9d03126d6eb445282564ee372c5b334f46abd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bff52ea842e55b6b6960fa133b5318a0eaffb537797a06e7cd9aa74a8770fdf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bff52ea842e55b6b6960fa133b5318a0eaffb537797a06e7cd9aa74a8770fdf6"}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bff52ea842e55b6b6960fa133b5318a0eaffb537797a06e7cd9aa74a8770fdf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb02681096f28a0fbdeb510f27dd1be8c791ef8beefdd95e988fccc5acda9bf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bff52ea842e55b6b6960fa133b5318a0eaffb537797a06e7cd9aa74a8770fdf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bff52ea842e55b6b6960fa133b5318a0eaffb537797a06e7cd9aa74a8770fdf6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bff52ea842e55b6b6960fa133b5318a0eaffb537797a06e7cd9aa74a8770fdf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bff52ea842e55b6b6960fa133b5318a0eaffb537797a06e7cd9aa74a8770fdf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bff52ea842e55b6b6960fa133b5318a0eaffb537797a06e7cd9aa74a8770fdf6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b2db7b2b5b29c8a56185ea889918fee66b1e6ad456ee35a5821e0c6284376ed"}
{"level":"error","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bff52ea842e55b6b6960fa133b5318a0eaffb537797a06e7cd9aa74a8770fdf6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bff52ea842e55b6b6960fa133b5318a0eaffb537797a06e7cd9aa74a8770fdf6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bff52ea842e55b6b6960fa133b5318a0eaffb537797a06e7cd9aa74a8770fdf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aec3ffdc2ea8ca932a99366a2b87545e70dec461c257f53fb9d24308225a6d05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bff52ea842e55b6b6960fa133b5318a0eaffb537797a06e7cd9aa74a8770fdf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5867ddd8ecf237e1049f06caf0f6092fbf6fab6fac91fd1fdad8d2536be59ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b980ae0228c868c16dc153599e9d03126d6eb445282564ee372c5b334f46abd"}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83c8ecfe3b0c132964f3bccfc244259776fc062a97e0c86d0f6b8b60ac4cd8e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bff52ea842e55b6b6960fa133b5318a0eaffb537797a06e7cd9aa74a8770fdf6"}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb02681096f28a0fbdeb510f27dd1be8c791ef8beefdd95e988fccc5acda9bf4"}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aec3ffdc2ea8ca932a99366a2b87545e70dec461c257f53fb9d24308225a6d05"}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5867ddd8ecf237e1049f06caf0f6092fbf6fab6fac91fd1fdad8d2536be59ab"}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75def7913fb5298803a0b175987351385dde5152b59d250614dae8a6561b2008","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83c8ecfe3b0c132964f3bccfc244259776fc062a97e0c86d0f6b8b60ac4cd8e7"}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84"}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75def7913fb5298803a0b175987351385dde5152b59d250614dae8a6561b2008"}
{"level":"info","ts":"2026-07-07T00:33:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48f93016-09b8-43ce-b54b-c179b00d4fd8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:54820","PortSpecifier":{"PortValue":54820}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"48f93016-09b8-43ce-b54b-c179b00d4fd8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:33:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48f93016-09b8-43ce-b54b-c179b00d4fd8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:54820","PortSpecifier":{"PortValue":54820}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384428,"nanos":12044310},"http":{"id":"48f93016-09b8-43ce-b54b-c179b00d4fd8","method":"POST","headers":{":authority":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:33:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"48f93016-09b8-43ce-b54b-c179b00d4fd8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:33:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"48f93016-09b8-43ce-b54b-c179b00d4fd8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fc8ccae5-ddad-4710-accf-0400aa73fe84","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=86b40590-6f47-4ced-9711-8d70b9b7e4f0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/04fabe1aadfa"]}}
{"level":"debug","ts":"2026-07-07T00:33:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"48f93016-09b8-43ce-b54b-c179b00d4fd8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/04fabe1aadfa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86b40590-6f47-4ced-9711-8d70b9b7e4f0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fc8ccae5-ddad-4710-accf-0400aa73fe84","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"481ae7f3dbcaf0fae9117afd6641ee726b2fff3431da674eed1e01e95dbaab7a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:33:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48f93016-09b8-43ce-b54b-c179b00d4fd8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48f93016-09b8-43ce-b54b-c179b00d4fd8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48f93016-09b8-43ce-b54b-c179b00d4fd8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"48f93016-09b8-43ce-b54b-c179b00d4fd8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:33:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48f93016-09b8-43ce-b54b-c179b00d4fd8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:33:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48f93016-09b8-43ce-b54b-c179b00d4fd8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:33:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48f93016-09b8-43ce-b54b-c179b00d4fd8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:33:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48f93016-09b8-43ce-b54b-c179b00d4fd8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:33:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f5e285b5-5792-4beb-a700-09d7513004d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:57032","PortSpecifier":{"PortValue":57032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f5e285b5-5792-4beb-a700-09d7513004d7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ead650.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:33:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f5e285b5-5792-4beb-a700-09d7513004d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:57032","PortSpecifier":{"PortValue":57032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384428,"nanos":50810495},"http":{"id":"f5e285b5-5792-4beb-a700-09d7513004d7","method":"POST","headers":{":authority":"e2e-shared-b-ead650.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:33:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f5e285b5-5792-4beb-a700-09d7513004d7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:33:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f5e285b5-5792-4beb-a700-09d7513004d7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fc8ccae5-ddad-4710-accf-0400aa73fe84","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=86b40590-6f47-4ced-9711-8d70b9b7e4f0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/04fabe1aadfa"]}}
{"level":"debug","ts":"2026-07-07T00:33:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f5e285b5-5792-4beb-a700-09d7513004d7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/04fabe1aadfa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86b40590-6f47-4ced-9711-8d70b9b7e4f0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fc8ccae5-ddad-4710-accf-0400aa73fe84","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5867ddd8ecf237e1049f06caf0f6092fbf6fab6fac91fd1fdad8d2536be59ab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ead650.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:33:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f5e285b5-5792-4beb-a700-09d7513004d7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f5e285b5-5792-4beb-a700-09d7513004d7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f5e285b5-5792-4beb-a700-09d7513004d7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ead650/rate-test-model-ead650\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f5e285b5-5792-4beb-a700-09d7513004d7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:33:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f5e285b5-5792-4beb-a700-09d7513004d7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:33:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f5e285b5-5792-4beb-a700-09d7513004d7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T00:33:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f5e285b5-5792-4beb-a700-09d7513004d7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:33:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f5e285b5-5792-4beb-a700-09d7513004d7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:33:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cacd999f-b8ed-42c5-a168-4fc9df88e8fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:54826","PortSpecifier":{"PortValue":54826}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cacd999f-b8ed-42c5-a168-4fc9df88e8fd","method":"POST","path":"/ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0/v1/completions","host":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:33:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cacd999f-b8ed-42c5-a168-4fc9df88e8fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:54826","PortSpecifier":{"PortValue":54826}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384428,"nanos":88891112},"http":{"id":"cacd999f-b8ed-42c5-a168-4fc9df88e8fd","method":"POST","headers":{":authority":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:33:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cacd999f-b8ed-42c5-a168-4fc9df88e8fd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-hcom09mObIfDBAmM_TX8FKdJ0n73TdkazW6IyA2oREmOeAmOWAoQxFRTv3M1"}
{"level":"debug","ts":"2026-07-07T00:33:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cacd999f-b8ed-42c5-a168-4fc9df88e8fd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-hcom09mObIfDBAmM_TX8FKdJ0n73TdkazW6IyA2oREmOeAmOWAoQxFRTv3M1\"}"}
{"level":"debug","ts":"2026-07-07T00:33:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cacd999f-b8ed-42c5-a168-4fc9df88e8fd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"167c50e1-17a7-441d-b264-29226d454221","keyName":"e2e-rate-a-41d1b3","subscription":"e2e-rate-iso-a-41d1b3","tenant":"e2e-shared-a-f5f1a0","userId":"167c50e1-17a7-441d-b264-29226d454221","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:33:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cacd999f-b8ed-42c5-a168-4fc9df88e8fd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0\",\"requestedSubscription\":\"e2e-rate-iso-a-41d1b3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:33:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cacd999f-b8ed-42c5-a168-4fc9df88e8fd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f5f1a0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-41d1b3","namespace":"ai-tenant-e2e-shared-a-f5f1a0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:33:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cacd999f-b8ed-42c5-a168-4fc9df88e8fd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:33:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cacd999f-b8ed-42c5-a168-4fc9df88e8fd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cacd999f-b8ed-42c5-a168-4fc9df88e8fd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cacd999f-b8ed-42c5-a168-4fc9df88e8fd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cacd999f-b8ed-42c5-a168-4fc9df88e8fd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cacd999f-b8ed-42c5-a168-4fc9df88e8fd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:33:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cacd999f-b8ed-42c5-a168-4fc9df88e8fd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-41d1b3"}
{"level":"debug","ts":"2026-07-07T00:33:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cacd999f-b8ed-42c5-a168-4fc9df88e8fd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:33:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cacd999f-b8ed-42c5-a168-4fc9df88e8fd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"167c50e1-17a7-441d-b264-29226d454221","keyName":"e2e-rate-a-41d1b3","selected_subscription":"e2e-rate-iso-a-41d1b3","selected_subscription_key":"ai-tenant-e2e-shared-a-f5f1a0/e2e-rate-iso-a-41d1b3@ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f5f1a0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-41d1b3","namespace":"ai-tenant-e2e-shared-a-f5f1a0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:33:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cacd999f-b8ed-42c5-a168-4fc9df88e8fd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:33:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cacd999f-b8ed-42c5-a168-4fc9df88e8fd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:33:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"22d5a448-77f9-43bf-9ea7-a4e8f7166ad1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:54834","PortSpecifier":{"PortValue":54834}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"22d5a448-77f9-43bf-9ea7-a4e8f7166ad1","method":"POST","path":"/ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0/v1/completions","host":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:33:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"22d5a448-77f9-43bf-9ea7-a4e8f7166ad1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:54834","PortSpecifier":{"PortValue":54834}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384429,"nanos":142894051},"http":{"id":"22d5a448-77f9-43bf-9ea7-a4e8f7166ad1","method":"POST","headers":{":authority":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:33:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"22d5a448-77f9-43bf-9ea7-a4e8f7166ad1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-hcom09mObIfDBAmM_TX8FKdJ0n73TdkazW6IyA2oREmOeAmOWAoQxFRTv3M1"}
{"level":"debug","ts":"2026-07-07T00:33:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"22d5a448-77f9-43bf-9ea7-a4e8f7166ad1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-hcom09mObIfDBAmM_TX8FKdJ0n73TdkazW6IyA2oREmOeAmOWAoQxFRTv3M1\"}"}
{"level":"debug","ts":"2026-07-07T00:33:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"22d5a448-77f9-43bf-9ea7-a4e8f7166ad1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"167c50e1-17a7-441d-b264-29226d454221","keyName":"e2e-rate-a-41d1b3","subscription":"e2e-rate-iso-a-41d1b3","tenant":"e2e-shared-a-f5f1a0","userId":"167c50e1-17a7-441d-b264-29226d454221","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:33:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"22d5a448-77f9-43bf-9ea7-a4e8f7166ad1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0\",\"requestedSubscription\":\"e2e-rate-iso-a-41d1b3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:33:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"22d5a448-77f9-43bf-9ea7-a4e8f7166ad1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f5f1a0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-41d1b3","namespace":"ai-tenant-e2e-shared-a-f5f1a0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"22d5a448-77f9-43bf-9ea7-a4e8f7166ad1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22d5a448-77f9-43bf-9ea7-a4e8f7166ad1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22d5a448-77f9-43bf-9ea7-a4e8f7166ad1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22d5a448-77f9-43bf-9ea7-a4e8f7166ad1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22d5a448-77f9-43bf-9ea7-a4e8f7166ad1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22d5a448-77f9-43bf-9ea7-a4e8f7166ad1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:33:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22d5a448-77f9-43bf-9ea7-a4e8f7166ad1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-41d1b3"}
{"level":"debug","ts":"2026-07-07T00:33:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22d5a448-77f9-43bf-9ea7-a4e8f7166ad1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:33:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22d5a448-77f9-43bf-9ea7-a4e8f7166ad1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"167c50e1-17a7-441d-b264-29226d454221","keyName":"e2e-rate-a-41d1b3","selected_subscription":"e2e-rate-iso-a-41d1b3","selected_subscription_key":"ai-tenant-e2e-shared-a-f5f1a0/e2e-rate-iso-a-41d1b3@ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f5f1a0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-41d1b3","namespace":"ai-tenant-e2e-shared-a-f5f1a0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:33:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"22d5a448-77f9-43bf-9ea7-a4e8f7166ad1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:33:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"22d5a448-77f9-43bf-9ea7-a4e8f7166ad1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:33:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"29d7b58f-fb83-416d-951e-c710d42e9f1a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:54846","PortSpecifier":{"PortValue":54846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"29d7b58f-fb83-416d-951e-c710d42e9f1a","method":"POST","path":"/ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0/v1/completions","host":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:33:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"29d7b58f-fb83-416d-951e-c710d42e9f1a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:54846","PortSpecifier":{"PortValue":54846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384430,"nanos":203656875},"http":{"id":"29d7b58f-fb83-416d-951e-c710d42e9f1a","method":"POST","headers":{":authority":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:33:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"29d7b58f-fb83-416d-951e-c710d42e9f1a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-hcom09mObIfDBAmM_TX8FKdJ0n73TdkazW6IyA2oREmOeAmOWAoQxFRTv3M1"}
{"level":"debug","ts":"2026-07-07T00:33:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"29d7b58f-fb83-416d-951e-c710d42e9f1a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-hcom09mObIfDBAmM_TX8FKdJ0n73TdkazW6IyA2oREmOeAmOWAoQxFRTv3M1\"}"}
{"level":"debug","ts":"2026-07-07T00:33:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"29d7b58f-fb83-416d-951e-c710d42e9f1a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"167c50e1-17a7-441d-b264-29226d454221","keyName":"e2e-rate-a-41d1b3","subscription":"e2e-rate-iso-a-41d1b3","tenant":"e2e-shared-a-f5f1a0","userId":"167c50e1-17a7-441d-b264-29226d454221","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:33:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"29d7b58f-fb83-416d-951e-c710d42e9f1a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0\",\"requestedSubscription\":\"e2e-rate-iso-a-41d1b3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:33:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"29d7b58f-fb83-416d-951e-c710d42e9f1a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f5f1a0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-41d1b3","namespace":"ai-tenant-e2e-shared-a-f5f1a0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:33:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"29d7b58f-fb83-416d-951e-c710d42e9f1a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:33:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29d7b58f-fb83-416d-951e-c710d42e9f1a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29d7b58f-fb83-416d-951e-c710d42e9f1a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29d7b58f-fb83-416d-951e-c710d42e9f1a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29d7b58f-fb83-416d-951e-c710d42e9f1a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29d7b58f-fb83-416d-951e-c710d42e9f1a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:33:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29d7b58f-fb83-416d-951e-c710d42e9f1a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-41d1b3"}
{"level":"debug","ts":"2026-07-07T00:33:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29d7b58f-fb83-416d-951e-c710d42e9f1a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:33:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29d7b58f-fb83-416d-951e-c710d42e9f1a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"167c50e1-17a7-441d-b264-29226d454221","keyName":"e2e-rate-a-41d1b3","selected_subscription":"e2e-rate-iso-a-41d1b3","selected_subscription_key":"ai-tenant-e2e-shared-a-f5f1a0/e2e-rate-iso-a-41d1b3@ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f5f1a0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-41d1b3","namespace":"ai-tenant-e2e-shared-a-f5f1a0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:33:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"29d7b58f-fb83-416d-951e-c710d42e9f1a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:33:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"29d7b58f-fb83-416d-951e-c710d42e9f1a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:33:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"94b70830-c5ec-49db-b56f-92f85d8cda8d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:37796","PortSpecifier":{"PortValue":37796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"94b70830-c5ec-49db-b56f-92f85d8cda8d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:33:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"94b70830-c5ec-49db-b56f-92f85d8cda8d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:37796","PortSpecifier":{"PortValue":37796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384438,"nanos":825350515},"http":{"id":"94b70830-c5ec-49db-b56f-92f85d8cda8d","method":"POST","headers":{":authority":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:33:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"94b70830-c5ec-49db-b56f-92f85d8cda8d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:33:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"94b70830-c5ec-49db-b56f-92f85d8cda8d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fc8ccae5-ddad-4710-accf-0400aa73fe84","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=86b40590-6f47-4ced-9711-8d70b9b7e4f0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/04fabe1aadfa"]}}
{"level":"debug","ts":"2026-07-07T00:33:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"94b70830-c5ec-49db-b56f-92f85d8cda8d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/04fabe1aadfa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86b40590-6f47-4ced-9711-8d70b9b7e4f0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fc8ccae5-ddad-4710-accf-0400aa73fe84","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"481ae7f3dbcaf0fae9117afd6641ee726b2fff3431da674eed1e01e95dbaab7a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:33:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94b70830-c5ec-49db-b56f-92f85d8cda8d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94b70830-c5ec-49db-b56f-92f85d8cda8d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94b70830-c5ec-49db-b56f-92f85d8cda8d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"94b70830-c5ec-49db-b56f-92f85d8cda8d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:33:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94b70830-c5ec-49db-b56f-92f85d8cda8d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:33:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94b70830-c5ec-49db-b56f-92f85d8cda8d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:33:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"94b70830-c5ec-49db-b56f-92f85d8cda8d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:33:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"94b70830-c5ec-49db-b56f-92f85d8cda8d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:33:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d9f0da3f-b1e1-4924-bf6e-0cad2a8e3254","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:52222","PortSpecifier":{"PortValue":52222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d9f0da3f-b1e1-4924-bf6e-0cad2a8e3254","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ead650.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:33:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d9f0da3f-b1e1-4924-bf6e-0cad2a8e3254","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:52222","PortSpecifier":{"PortValue":52222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384438,"nanos":860585831},"http":{"id":"d9f0da3f-b1e1-4924-bf6e-0cad2a8e3254","method":"POST","headers":{":authority":"e2e-shared-b-ead650.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:33:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d9f0da3f-b1e1-4924-bf6e-0cad2a8e3254","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:33:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d9f0da3f-b1e1-4924-bf6e-0cad2a8e3254","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fc8ccae5-ddad-4710-accf-0400aa73fe84","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=86b40590-6f47-4ced-9711-8d70b9b7e4f0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/04fabe1aadfa"]}}
{"level":"debug","ts":"2026-07-07T00:33:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d9f0da3f-b1e1-4924-bf6e-0cad2a8e3254","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/04fabe1aadfa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86b40590-6f47-4ced-9711-8d70b9b7e4f0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fc8ccae5-ddad-4710-accf-0400aa73fe84","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5867ddd8ecf237e1049f06caf0f6092fbf6fab6fac91fd1fdad8d2536be59ab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ead650.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:33:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9f0da3f-b1e1-4924-bf6e-0cad2a8e3254","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9f0da3f-b1e1-4924-bf6e-0cad2a8e3254","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9f0da3f-b1e1-4924-bf6e-0cad2a8e3254","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ead650/rate-test-model-ead650\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d9f0da3f-b1e1-4924-bf6e-0cad2a8e3254","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:33:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9f0da3f-b1e1-4924-bf6e-0cad2a8e3254","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:33:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9f0da3f-b1e1-4924-bf6e-0cad2a8e3254","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:33:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d9f0da3f-b1e1-4924-bf6e-0cad2a8e3254","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:33:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d9f0da3f-b1e1-4924-bf6e-0cad2a8e3254","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:33:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2259c8b4-e717-477b-bb4e-2b3c9d31cc58","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:37812","PortSpecifier":{"PortValue":37812}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2259c8b4-e717-477b-bb4e-2b3c9d31cc58","method":"POST","path":"/ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0/v1/completions","host":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:33:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2259c8b4-e717-477b-bb4e-2b3c9d31cc58","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:37812","PortSpecifier":{"PortValue":37812}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384438,"nanos":897456321},"http":{"id":"2259c8b4-e717-477b-bb4e-2b3c9d31cc58","method":"POST","headers":{":authority":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:33:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2259c8b4-e717-477b-bb4e-2b3c9d31cc58","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1MZeeLAYhwGc0NpU_rVGyxFCPziONCmJt68VqCnoYkQXpNCLqZ5PKWbHUKIh"}
{"level":"debug","ts":"2026-07-07T00:33:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2259c8b4-e717-477b-bb4e-2b3c9d31cc58","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1MZeeLAYhwGc0NpU_rVGyxFCPziONCmJt68VqCnoYkQXpNCLqZ5PKWbHUKIh\"}"}
{"level":"debug","ts":"2026-07-07T00:33:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2259c8b4-e717-477b-bb4e-2b3c9d31cc58","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e4adc9dc-26df-4427-b0ae-f4bad00d89e3","keyName":"e2e-rate-a-6fef11","subscription":"e2e-rate-iso-a-6fef11","tenant":"e2e-shared-a-f5f1a0","userId":"e4adc9dc-26df-4427-b0ae-f4bad00d89e3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:33:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2259c8b4-e717-477b-bb4e-2b3c9d31cc58","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0\",\"requestedSubscription\":\"e2e-rate-iso-a-6fef11\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:33:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2259c8b4-e717-477b-bb4e-2b3c9d31cc58","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f5f1a0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6fef11","namespace":"ai-tenant-e2e-shared-a-f5f1a0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:33:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2259c8b4-e717-477b-bb4e-2b3c9d31cc58","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:33:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2259c8b4-e717-477b-bb4e-2b3c9d31cc58","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2259c8b4-e717-477b-bb4e-2b3c9d31cc58","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2259c8b4-e717-477b-bb4e-2b3c9d31cc58","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2259c8b4-e717-477b-bb4e-2b3c9d31cc58","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2259c8b4-e717-477b-bb4e-2b3c9d31cc58","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:33:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2259c8b4-e717-477b-bb4e-2b3c9d31cc58","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:33:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2259c8b4-e717-477b-bb4e-2b3c9d31cc58","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6fef11"}
{"level":"debug","ts":"2026-07-07T00:33:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2259c8b4-e717-477b-bb4e-2b3c9d31cc58","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e4adc9dc-26df-4427-b0ae-f4bad00d89e3","keyName":"e2e-rate-a-6fef11","selected_subscription":"e2e-rate-iso-a-6fef11","selected_subscription_key":"ai-tenant-e2e-shared-a-f5f1a0/e2e-rate-iso-a-6fef11@ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f5f1a0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6fef11","namespace":"ai-tenant-e2e-shared-a-f5f1a0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:33:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2259c8b4-e717-477b-bb4e-2b3c9d31cc58","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:33:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2259c8b4-e717-477b-bb4e-2b3c9d31cc58","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:33:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b34af20-d1d4-47b5-9216-3591d3ff8872","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:37814","PortSpecifier":{"PortValue":37814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6b34af20-d1d4-47b5-9216-3591d3ff8872","method":"POST","path":"/ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0/v1/completions","host":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:33:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b34af20-d1d4-47b5-9216-3591d3ff8872","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:37814","PortSpecifier":{"PortValue":37814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384439,"nanos":935010035},"http":{"id":"6b34af20-d1d4-47b5-9216-3591d3ff8872","method":"POST","headers":{":authority":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:33:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6b34af20-d1d4-47b5-9216-3591d3ff8872","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1MZeeLAYhwGc0NpU_rVGyxFCPziONCmJt68VqCnoYkQXpNCLqZ5PKWbHUKIh"}
{"level":"debug","ts":"2026-07-07T00:33:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6b34af20-d1d4-47b5-9216-3591d3ff8872","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1MZeeLAYhwGc0NpU_rVGyxFCPziONCmJt68VqCnoYkQXpNCLqZ5PKWbHUKIh\"}"}
{"level":"debug","ts":"2026-07-07T00:33:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6b34af20-d1d4-47b5-9216-3591d3ff8872","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e4adc9dc-26df-4427-b0ae-f4bad00d89e3","keyName":"e2e-rate-a-6fef11","subscription":"e2e-rate-iso-a-6fef11","tenant":"e2e-shared-a-f5f1a0","userId":"e4adc9dc-26df-4427-b0ae-f4bad00d89e3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:33:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6b34af20-d1d4-47b5-9216-3591d3ff8872","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0\",\"requestedSubscription\":\"e2e-rate-iso-a-6fef11\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:33:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6b34af20-d1d4-47b5-9216-3591d3ff8872","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f5f1a0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6fef11","namespace":"ai-tenant-e2e-shared-a-f5f1a0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:33:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6b34af20-d1d4-47b5-9216-3591d3ff8872","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:33:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b34af20-d1d4-47b5-9216-3591d3ff8872","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b34af20-d1d4-47b5-9216-3591d3ff8872","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b34af20-d1d4-47b5-9216-3591d3ff8872","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b34af20-d1d4-47b5-9216-3591d3ff8872","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b34af20-d1d4-47b5-9216-3591d3ff8872","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:33:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b34af20-d1d4-47b5-9216-3591d3ff8872","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6fef11"}
{"level":"debug","ts":"2026-07-07T00:33:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b34af20-d1d4-47b5-9216-3591d3ff8872","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:33:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b34af20-d1d4-47b5-9216-3591d3ff8872","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e4adc9dc-26df-4427-b0ae-f4bad00d89e3","keyName":"e2e-rate-a-6fef11","selected_subscription":"e2e-rate-iso-a-6fef11","selected_subscription_key":"ai-tenant-e2e-shared-a-f5f1a0/e2e-rate-iso-a-6fef11@ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f5f1a0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6fef11","namespace":"ai-tenant-e2e-shared-a-f5f1a0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:33:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b34af20-d1d4-47b5-9216-3591d3ff8872","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:33:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b34af20-d1d4-47b5-9216-3591d3ff8872","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:34:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f206ba0a-53fb-4abe-9cdd-bef5f627aab1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:37820","PortSpecifier":{"PortValue":37820}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f206ba0a-53fb-4abe-9cdd-bef5f627aab1","method":"POST","path":"/ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0/v1/completions","host":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:34:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f206ba0a-53fb-4abe-9cdd-bef5f627aab1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:37820","PortSpecifier":{"PortValue":37820}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384440,"nanos":994885176},"http":{"id":"f206ba0a-53fb-4abe-9cdd-bef5f627aab1","method":"POST","headers":{":authority":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f206ba0a-53fb-4abe-9cdd-bef5f627aab1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1MZeeLAYhwGc0NpU_rVGyxFCPziONCmJt68VqCnoYkQXpNCLqZ5PKWbHUKIh"}
{"level":"debug","ts":"2026-07-07T00:34:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f206ba0a-53fb-4abe-9cdd-bef5f627aab1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1MZeeLAYhwGc0NpU_rVGyxFCPziONCmJt68VqCnoYkQXpNCLqZ5PKWbHUKIh\"}"}
{"level":"debug","ts":"2026-07-07T00:34:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f206ba0a-53fb-4abe-9cdd-bef5f627aab1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e4adc9dc-26df-4427-b0ae-f4bad00d89e3","keyName":"e2e-rate-a-6fef11","subscription":"e2e-rate-iso-a-6fef11","tenant":"e2e-shared-a-f5f1a0","userId":"e4adc9dc-26df-4427-b0ae-f4bad00d89e3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:34:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f206ba0a-53fb-4abe-9cdd-bef5f627aab1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0\",\"requestedSubscription\":\"e2e-rate-iso-a-6fef11\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:34:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f206ba0a-53fb-4abe-9cdd-bef5f627aab1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f5f1a0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6fef11","namespace":"ai-tenant-e2e-shared-a-f5f1a0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:34:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f206ba0a-53fb-4abe-9cdd-bef5f627aab1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f206ba0a-53fb-4abe-9cdd-bef5f627aab1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f206ba0a-53fb-4abe-9cdd-bef5f627aab1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f206ba0a-53fb-4abe-9cdd-bef5f627aab1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f206ba0a-53fb-4abe-9cdd-bef5f627aab1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f206ba0a-53fb-4abe-9cdd-bef5f627aab1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:34:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f206ba0a-53fb-4abe-9cdd-bef5f627aab1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6fef11"}
{"level":"debug","ts":"2026-07-07T00:34:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f206ba0a-53fb-4abe-9cdd-bef5f627aab1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:34:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f206ba0a-53fb-4abe-9cdd-bef5f627aab1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e4adc9dc-26df-4427-b0ae-f4bad00d89e3","keyName":"e2e-rate-a-6fef11","selected_subscription":"e2e-rate-iso-a-6fef11","selected_subscription_key":"ai-tenant-e2e-shared-a-f5f1a0/e2e-rate-iso-a-6fef11@ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f5f1a0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6fef11","namespace":"ai-tenant-e2e-shared-a-f5f1a0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:34:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f206ba0a-53fb-4abe-9cdd-bef5f627aab1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:34:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f206ba0a-53fb-4abe-9cdd-bef5f627aab1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:34:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4ed68ed7-b6e8-4e32-b1ab-562085b8e49f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:37822","PortSpecifier":{"PortValue":37822}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4ed68ed7-b6e8-4e32-b1ab-562085b8e49f","method":"POST","path":"/ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0/v1/completions","host":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:34:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4ed68ed7-b6e8-4e32-b1ab-562085b8e49f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:37822","PortSpecifier":{"PortValue":37822}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384442,"nanos":36993928},"http":{"id":"4ed68ed7-b6e8-4e32-b1ab-562085b8e49f","method":"POST","headers":{":authority":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4ed68ed7-b6e8-4e32-b1ab-562085b8e49f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1MZeeLAYhwGc0NpU_rVGyxFCPziONCmJt68VqCnoYkQXpNCLqZ5PKWbHUKIh"}
{"level":"debug","ts":"2026-07-07T00:34:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4ed68ed7-b6e8-4e32-b1ab-562085b8e49f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1MZeeLAYhwGc0NpU_rVGyxFCPziONCmJt68VqCnoYkQXpNCLqZ5PKWbHUKIh\"}"}
{"level":"debug","ts":"2026-07-07T00:34:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4ed68ed7-b6e8-4e32-b1ab-562085b8e49f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e4adc9dc-26df-4427-b0ae-f4bad00d89e3","keyName":"e2e-rate-a-6fef11","subscription":"e2e-rate-iso-a-6fef11","tenant":"e2e-shared-a-f5f1a0","userId":"e4adc9dc-26df-4427-b0ae-f4bad00d89e3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:34:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4ed68ed7-b6e8-4e32-b1ab-562085b8e49f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0\",\"requestedSubscription\":\"e2e-rate-iso-a-6fef11\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:34:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4ed68ed7-b6e8-4e32-b1ab-562085b8e49f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f5f1a0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6fef11","namespace":"ai-tenant-e2e-shared-a-f5f1a0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:34:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4ed68ed7-b6e8-4e32-b1ab-562085b8e49f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ed68ed7-b6e8-4e32-b1ab-562085b8e49f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ed68ed7-b6e8-4e32-b1ab-562085b8e49f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ed68ed7-b6e8-4e32-b1ab-562085b8e49f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ed68ed7-b6e8-4e32-b1ab-562085b8e49f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ed68ed7-b6e8-4e32-b1ab-562085b8e49f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:34:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ed68ed7-b6e8-4e32-b1ab-562085b8e49f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6fef11"}
{"level":"debug","ts":"2026-07-07T00:34:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ed68ed7-b6e8-4e32-b1ab-562085b8e49f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:34:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ed68ed7-b6e8-4e32-b1ab-562085b8e49f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e4adc9dc-26df-4427-b0ae-f4bad00d89e3","keyName":"e2e-rate-a-6fef11","selected_subscription":"e2e-rate-iso-a-6fef11","selected_subscription_key":"ai-tenant-e2e-shared-a-f5f1a0/e2e-rate-iso-a-6fef11@ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f5f1a0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6fef11","namespace":"ai-tenant-e2e-shared-a-f5f1a0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:34:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4ed68ed7-b6e8-4e32-b1ab-562085b8e49f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:34:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4ed68ed7-b6e8-4e32-b1ab-562085b8e49f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:34:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc691846-ea07-491c-b235-de9e6e16a894","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:37830","PortSpecifier":{"PortValue":37830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cc691846-ea07-491c-b235-de9e6e16a894","method":"POST","path":"/ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0/v1/completions","host":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:34:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc691846-ea07-491c-b235-de9e6e16a894","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:37830","PortSpecifier":{"PortValue":37830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384443,"nanos":83275092},"http":{"id":"cc691846-ea07-491c-b235-de9e6e16a894","method":"POST","headers":{":authority":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cc691846-ea07-491c-b235-de9e6e16a894","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1MZeeLAYhwGc0NpU_rVGyxFCPziONCmJt68VqCnoYkQXpNCLqZ5PKWbHUKIh"}
{"level":"debug","ts":"2026-07-07T00:34:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cc691846-ea07-491c-b235-de9e6e16a894","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1MZeeLAYhwGc0NpU_rVGyxFCPziONCmJt68VqCnoYkQXpNCLqZ5PKWbHUKIh\"}"}
{"level":"debug","ts":"2026-07-07T00:34:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cc691846-ea07-491c-b235-de9e6e16a894","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e4adc9dc-26df-4427-b0ae-f4bad00d89e3","keyName":"e2e-rate-a-6fef11","subscription":"e2e-rate-iso-a-6fef11","tenant":"e2e-shared-a-f5f1a0","userId":"e4adc9dc-26df-4427-b0ae-f4bad00d89e3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:34:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cc691846-ea07-491c-b235-de9e6e16a894","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0\",\"requestedSubscription\":\"e2e-rate-iso-a-6fef11\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:34:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cc691846-ea07-491c-b235-de9e6e16a894","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f5f1a0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6fef11","namespace":"ai-tenant-e2e-shared-a-f5f1a0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cc691846-ea07-491c-b235-de9e6e16a894","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc691846-ea07-491c-b235-de9e6e16a894","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc691846-ea07-491c-b235-de9e6e16a894","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc691846-ea07-491c-b235-de9e6e16a894","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc691846-ea07-491c-b235-de9e6e16a894","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc691846-ea07-491c-b235-de9e6e16a894","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:34:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc691846-ea07-491c-b235-de9e6e16a894","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:34:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc691846-ea07-491c-b235-de9e6e16a894","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6fef11"}
{"level":"debug","ts":"2026-07-07T00:34:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc691846-ea07-491c-b235-de9e6e16a894","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e4adc9dc-26df-4427-b0ae-f4bad00d89e3","keyName":"e2e-rate-a-6fef11","selected_subscription":"e2e-rate-iso-a-6fef11","selected_subscription_key":"ai-tenant-e2e-shared-a-f5f1a0/e2e-rate-iso-a-6fef11@ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f5f1a0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6fef11","namespace":"ai-tenant-e2e-shared-a-f5f1a0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:34:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc691846-ea07-491c-b235-de9e6e16a894","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:34:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc691846-ea07-491c-b235-de9e6e16a894","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:34:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1a84c33-2cff-4fa0-a96c-1f605c25ce11","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:37846","PortSpecifier":{"PortValue":37846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f1a84c33-2cff-4fa0-a96c-1f605c25ce11","method":"POST","path":"/ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0/v1/completions","host":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:34:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1a84c33-2cff-4fa0-a96c-1f605c25ce11","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:37846","PortSpecifier":{"PortValue":37846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384444,"nanos":125275569},"http":{"id":"f1a84c33-2cff-4fa0-a96c-1f605c25ce11","method":"POST","headers":{":authority":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f1a84c33-2cff-4fa0-a96c-1f605c25ce11","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1MZeeLAYhwGc0NpU_rVGyxFCPziONCmJt68VqCnoYkQXpNCLqZ5PKWbHUKIh"}
{"level":"debug","ts":"2026-07-07T00:34:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f1a84c33-2cff-4fa0-a96c-1f605c25ce11","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1MZeeLAYhwGc0NpU_rVGyxFCPziONCmJt68VqCnoYkQXpNCLqZ5PKWbHUKIh\"}"}
{"level":"debug","ts":"2026-07-07T00:34:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f1a84c33-2cff-4fa0-a96c-1f605c25ce11","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e4adc9dc-26df-4427-b0ae-f4bad00d89e3","keyName":"e2e-rate-a-6fef11","subscription":"e2e-rate-iso-a-6fef11","tenant":"e2e-shared-a-f5f1a0","userId":"e4adc9dc-26df-4427-b0ae-f4bad00d89e3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:34:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f1a84c33-2cff-4fa0-a96c-1f605c25ce11","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0\",\"requestedSubscription\":\"e2e-rate-iso-a-6fef11\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:34:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f1a84c33-2cff-4fa0-a96c-1f605c25ce11","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f5f1a0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6fef11","namespace":"ai-tenant-e2e-shared-a-f5f1a0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:34:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f1a84c33-2cff-4fa0-a96c-1f605c25ce11","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1a84c33-2cff-4fa0-a96c-1f605c25ce11","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1a84c33-2cff-4fa0-a96c-1f605c25ce11","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1a84c33-2cff-4fa0-a96c-1f605c25ce11","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1a84c33-2cff-4fa0-a96c-1f605c25ce11","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1a84c33-2cff-4fa0-a96c-1f605c25ce11","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:34:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1a84c33-2cff-4fa0-a96c-1f605c25ce11","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6fef11"}
{"level":"debug","ts":"2026-07-07T00:34:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1a84c33-2cff-4fa0-a96c-1f605c25ce11","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:34:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1a84c33-2cff-4fa0-a96c-1f605c25ce11","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e4adc9dc-26df-4427-b0ae-f4bad00d89e3","keyName":"e2e-rate-a-6fef11","selected_subscription":"e2e-rate-iso-a-6fef11","selected_subscription_key":"ai-tenant-e2e-shared-a-f5f1a0/e2e-rate-iso-a-6fef11@ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f5f1a0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6fef11","namespace":"ai-tenant-e2e-shared-a-f5f1a0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:34:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1a84c33-2cff-4fa0-a96c-1f605c25ce11","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:34:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1a84c33-2cff-4fa0-a96c-1f605c25ce11","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4a1f397-f081-4210-aedf-0d24f981484c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:37852","PortSpecifier":{"PortValue":37852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e4a1f397-f081-4210-aedf-0d24f981484c","method":"POST","path":"/ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0/v1/completions","host":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4a1f397-f081-4210-aedf-0d24f981484c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:37852","PortSpecifier":{"PortValue":37852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384445,"nanos":163214668},"http":{"id":"e4a1f397-f081-4210-aedf-0d24f981484c","method":"POST","headers":{":authority":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e4a1f397-f081-4210-aedf-0d24f981484c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1MZeeLAYhwGc0NpU_rVGyxFCPziONCmJt68VqCnoYkQXpNCLqZ5PKWbHUKIh"}
{"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e4a1f397-f081-4210-aedf-0d24f981484c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1MZeeLAYhwGc0NpU_rVGyxFCPziONCmJt68VqCnoYkQXpNCLqZ5PKWbHUKIh\"}"}
{"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e4a1f397-f081-4210-aedf-0d24f981484c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e4adc9dc-26df-4427-b0ae-f4bad00d89e3","keyName":"e2e-rate-a-6fef11","subscription":"e2e-rate-iso-a-6fef11","tenant":"e2e-shared-a-f5f1a0","userId":"e4adc9dc-26df-4427-b0ae-f4bad00d89e3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e4a1f397-f081-4210-aedf-0d24f981484c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0\",\"requestedSubscription\":\"e2e-rate-iso-a-6fef11\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e4a1f397-f081-4210-aedf-0d24f981484c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f5f1a0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6fef11","namespace":"ai-tenant-e2e-shared-a-f5f1a0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e4a1f397-f081-4210-aedf-0d24f981484c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4a1f397-f081-4210-aedf-0d24f981484c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4a1f397-f081-4210-aedf-0d24f981484c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4a1f397-f081-4210-aedf-0d24f981484c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4a1f397-f081-4210-aedf-0d24f981484c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4a1f397-f081-4210-aedf-0d24f981484c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4a1f397-f081-4210-aedf-0d24f981484c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4a1f397-f081-4210-aedf-0d24f981484c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6fef11"}
{"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4a1f397-f081-4210-aedf-0d24f981484c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e4adc9dc-26df-4427-b0ae-f4bad00d89e3","keyName":"e2e-rate-a-6fef11","selected_subscription":"e2e-rate-iso-a-6fef11","selected_subscription_key":"ai-tenant-e2e-shared-a-f5f1a0/e2e-rate-iso-a-6fef11@ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f5f1a0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6fef11","namespace":"ai-tenant-e2e-shared-a-f5f1a0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4a1f397-f081-4210-aedf-0d24f981484c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4a1f397-f081-4210-aedf-0d24f981484c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:34:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e09d5113-2d9a-4359-a3ac-83a285f93e22","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:37862","PortSpecifier":{"PortValue":37862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e09d5113-2d9a-4359-a3ac-83a285f93e22","method":"POST","path":"/ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0/v1/completions","host":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:34:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e09d5113-2d9a-4359-a3ac-83a285f93e22","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:37862","PortSpecifier":{"PortValue":37862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384446,"nanos":200611937},"http":{"id":"e09d5113-2d9a-4359-a3ac-83a285f93e22","method":"POST","headers":{":authority":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e09d5113-2d9a-4359-a3ac-83a285f93e22","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1MZeeLAYhwGc0NpU_rVGyxFCPziONCmJt68VqCnoYkQXpNCLqZ5PKWbHUKIh"}
{"level":"debug","ts":"2026-07-07T00:34:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e09d5113-2d9a-4359-a3ac-83a285f93e22","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1MZeeLAYhwGc0NpU_rVGyxFCPziONCmJt68VqCnoYkQXpNCLqZ5PKWbHUKIh\"}"}
{"level":"debug","ts":"2026-07-07T00:34:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e09d5113-2d9a-4359-a3ac-83a285f93e22","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e4adc9dc-26df-4427-b0ae-f4bad00d89e3","keyName":"e2e-rate-a-6fef11","subscription":"e2e-rate-iso-a-6fef11","tenant":"e2e-shared-a-f5f1a0","userId":"e4adc9dc-26df-4427-b0ae-f4bad00d89e3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:34:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e09d5113-2d9a-4359-a3ac-83a285f93e22","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0\",\"requestedSubscription\":\"e2e-rate-iso-a-6fef11\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:34:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e09d5113-2d9a-4359-a3ac-83a285f93e22","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f5f1a0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6fef11","namespace":"ai-tenant-e2e-shared-a-f5f1a0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:34:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e09d5113-2d9a-4359-a3ac-83a285f93e22","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e09d5113-2d9a-4359-a3ac-83a285f93e22","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e09d5113-2d9a-4359-a3ac-83a285f93e22","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e09d5113-2d9a-4359-a3ac-83a285f93e22","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e09d5113-2d9a-4359-a3ac-83a285f93e22","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e09d5113-2d9a-4359-a3ac-83a285f93e22","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:34:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e09d5113-2d9a-4359-a3ac-83a285f93e22","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:34:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e09d5113-2d9a-4359-a3ac-83a285f93e22","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6fef11"}
{"level":"debug","ts":"2026-07-07T00:34:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e09d5113-2d9a-4359-a3ac-83a285f93e22","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e4adc9dc-26df-4427-b0ae-f4bad00d89e3","keyName":"e2e-rate-a-6fef11","selected_subscription":"e2e-rate-iso-a-6fef11","selected_subscription_key":"ai-tenant-e2e-shared-a-f5f1a0/e2e-rate-iso-a-6fef11@ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f5f1a0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6fef11","namespace":"ai-tenant-e2e-shared-a-f5f1a0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:34:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e09d5113-2d9a-4359-a3ac-83a285f93e22","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:34:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e09d5113-2d9a-4359-a3ac-83a285f93e22","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:34:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78bdea98-8d9c-4f0e-8b5f-84555e14d643","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:41016","PortSpecifier":{"PortValue":41016}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"78bdea98-8d9c-4f0e-8b5f-84555e14d643","method":"POST","path":"/ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0/v1/completions","host":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:34:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78bdea98-8d9c-4f0e-8b5f-84555e14d643","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:41016","PortSpecifier":{"PortValue":41016}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384447,"nanos":242002452},"http":{"id":"78bdea98-8d9c-4f0e-8b5f-84555e14d643","method":"POST","headers":{":authority":"e2e-shared-a-f5f1a0.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"78bdea98-8d9c-4f0e-8b5f-84555e14d643","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1MZeeLAYhwGc0NpU_rVGyxFCPziONCmJt68VqCnoYkQXpNCLqZ5PKWbHUKIh"}
{"level":"debug","ts":"2026-07-07T00:34:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"78bdea98-8d9c-4f0e-8b5f-84555e14d643","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1MZeeLAYhwGc0NpU_rVGyxFCPziONCmJt68VqCnoYkQXpNCLqZ5PKWbHUKIh\"}"}
{"level":"debug","ts":"2026-07-07T00:34:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"78bdea98-8d9c-4f0e-8b5f-84555e14d643","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e4adc9dc-26df-4427-b0ae-f4bad00d89e3","keyName":"e2e-rate-a-6fef11","subscription":"e2e-rate-iso-a-6fef11","tenant":"e2e-shared-a-f5f1a0","userId":"e4adc9dc-26df-4427-b0ae-f4bad00d89e3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:34:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"78bdea98-8d9c-4f0e-8b5f-84555e14d643","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0\",\"requestedSubscription\":\"e2e-rate-iso-a-6fef11\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:34:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"78bdea98-8d9c-4f0e-8b5f-84555e14d643","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5f1a0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f5f1a0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6fef11","namespace":"ai-tenant-e2e-shared-a-f5f1a0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:34:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"78bdea98-8d9c-4f0e-8b5f-84555e14d643","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78bdea98-8d9c-4f0e-8b5f-84555e14d643","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78bdea98-8d9c-4f0e-8b5f-84555e14d643","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78bdea98-8d9c-4f0e-8b5f-84555e14d643","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78bdea98-8d9c-4f0e-8b5f-84555e14d643","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78bdea98-8d9c-4f0e-8b5f-84555e14d643","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:34:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78bdea98-8d9c-4f0e-8b5f-84555e14d643","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:34:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78bdea98-8d9c-4f0e-8b5f-84555e14d643","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6fef11"}
{"level":"debug","ts":"2026-07-07T00:34:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78bdea98-8d9c-4f0e-8b5f-84555e14d643","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e4adc9dc-26df-4427-b0ae-f4bad00d89e3","keyName":"e2e-rate-a-6fef11","selected_subscription":"e2e-rate-iso-a-6fef11","selected_subscription_key":"ai-tenant-e2e-shared-a-f5f1a0/e2e-rate-iso-a-6fef11@ai-tenant-e2e-shared-a-f5f1a0/rate-test-model-f5f1a0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f5f1a0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6fef11","namespace":"ai-tenant-e2e-shared-a-f5f1a0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:34:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78bdea98-8d9c-4f0e-8b5f-84555e14d643","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:34:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78bdea98-8d9c-4f0e-8b5f-84555e14d643","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:34:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1d6b47d-4554-4649-96c3-ad2146c360b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:53194","PortSpecifier":{"PortValue":53194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b1d6b47d-4554-4649-96c3-ad2146c360b6","method":"POST","path":"/ai-tenant-e2e-shared-b-ead650/rate-test-model-ead650/v1/completions","host":"e2e-shared-b-ead650.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:34:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1d6b47d-4554-4649-96c3-ad2146c360b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:53194","PortSpecifier":{"PortValue":53194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384447,"nanos":282070874},"http":{"id":"b1d6b47d-4554-4649-96c3-ad2146c360b6","method":"POST","headers":{":authority":"e2e-shared-b-ead650.apps.3979acf0-6ba8-4207-b95e-04fabe1aadfa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-ead650/rate-test-model-ead650/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b1d6b47d-4554-4649-96c3-ad2146c360b6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1FeodL4hkSR00ep7H_eqnRhL50zokb4vUe40XVoEPIBD1EKQA4ZxdgWAaO75W"}
{"level":"debug","ts":"2026-07-07T00:34:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b1d6b47d-4554-4649-96c3-ad2146c360b6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-ead650.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1FeodL4hkSR00ep7H_eqnRhL50zokb4vUe40XVoEPIBD1EKQA4ZxdgWAaO75W\"}"}
{"level":"debug","ts":"2026-07-07T00:34:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b1d6b47d-4554-4649-96c3-ad2146c360b6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-ead650.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fc87d68b-1bc8-4b42-ba7f-34e42c2065f7","keyName":"e2e-rate-b-6fef11","subscription":"e2e-rate-iso-b-6fef11","tenant":"e2e-shared-b-ead650","userId":"fc87d68b-1bc8-4b42-ba7f-34e42c2065f7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:34:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b1d6b47d-4554-4649-96c3-ad2146c360b6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-ead650.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-ead650/rate-test-model-ead650\",\"requestedSubscription\":\"e2e-rate-iso-b-6fef11\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:34:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b1d6b47d-4554-4649-96c3-ad2146c360b6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-ead650.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ead650","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-6fef11","namespace":"ai-tenant-e2e-shared-b-ead650","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:34:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b1d6b47d-4554-4649-96c3-ad2146c360b6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1d6b47d-4554-4649-96c3-ad2146c360b6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1d6b47d-4554-4649-96c3-ad2146c360b6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1d6b47d-4554-4649-96c3-ad2146c360b6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ead650/rate-test-model-ead650\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1d6b47d-4554-4649-96c3-ad2146c360b6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1d6b47d-4554-4649-96c3-ad2146c360b6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:34:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1d6b47d-4554-4649-96c3-ad2146c360b6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:34:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1d6b47d-4554-4649-96c3-ad2146c360b6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-6fef11"}
{"level":"debug","ts":"2026-07-07T00:34:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1d6b47d-4554-4649-96c3-ad2146c360b6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fc87d68b-1bc8-4b42-ba7f-34e42c2065f7","keyName":"e2e-rate-b-6fef11","selected_subscription":"e2e-rate-iso-b-6fef11","selected_subscription_key":"ai-tenant-e2e-shared-b-ead650/e2e-rate-iso-b-6fef11@ai-tenant-e2e-shared-b-ead650/rate-test-model-ead650","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ead650","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-6fef11","namespace":"ai-tenant-e2e-shared-b-ead650","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:34:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1d6b47d-4554-4649-96c3-ad2146c360b6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:34:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1d6b47d-4554-4649-96c3-ad2146c360b6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec5ea8b62d4feb7edd322eeffd6bf139bb783d7ae92550376f0544d25b6cc32c"}
{"level":"info","ts":"2026-07-07T00:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ece48617aecd296b27546f1d51eedbcdc936d297a2288e2d69628d655fc9c9c"}
{"level":"info","ts":"2026-07-07T00:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83720d7473d6a1bb37281978fb7c1426b74255a2fbc773576527a5b54a764fa9"}
{"level":"info","ts":"2026-07-07T00:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bff52ea842e55b6b6960fa133b5318a0eaffb537797a06e7cd9aa74a8770fdf6"}
{"level":"info","ts":"2026-07-07T00:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a39bb15b49cc73a1b30402dbd484b4ca8ec65b6670a5a25d5bb41d2d2342ebc4"}
{"level":"info","ts":"2026-07-07T00:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8757d990451d57af2f733fb4345dbd27a3ba089f83033bda83749b535ffacd0"}
{"level":"info","ts":"2026-07-07T00:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f3f033a8e090a33022b4681dd6e3e510677ebe94d6087b5a669b8c0ef3badc84"}
{"level":"info","ts":"2026-07-07T00:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11a6fa754a17a588e24931631b9cdd0f6c9188d2d9eff645a65fefaae1cdb4e1"}
{"level":"info","ts":"2026-07-07T00:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/75def7913fb5298803a0b175987351385dde5152b59d250614dae8a6561b2008"}
{"level":"info","ts":"2026-07-07T00:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/596539ea4b853744656d4cd835aed4b099ac12a17a86b20758099243733b8304"}
{"level":"info","ts":"2026-07-07T00:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb02681096f28a0fbdeb510f27dd1be8c791ef8beefdd95e988fccc5acda9bf4"}
{"level":"info","ts":"2026-07-07T00:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b2db7b2b5b29c8a56185ea889918fee66b1e6ad456ee35a5821e0c6284376ed"}
{"level":"info","ts":"2026-07-07T00:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6b980ae0228c868c16dc153599e9d03126d6eb445282564ee372c5b334f46abd"}
{"level":"info","ts":"2026-07-07T00:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aec3ffdc2ea8ca932a99366a2b87545e70dec461c257f53fb9d24308225a6d05"}
{"level":"info","ts":"2026-07-07T00:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5a43630b47480e984221af321ea31758480a465ea59463930deb31bac78b1ac1"}
{"level":"info","ts":"2026-07-07T00:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b85ea50ee942f24e41b39a0bdda92280dbfe6bae8f5624c7a1743bb0dee8145b"}
{"level":"info","ts":"2026-07-07T00:34:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/481ae7f3dbcaf0fae9117afd6641ee726b2fff3431da674eed1e01e95dbaab7a"}
{"level":"info","ts":"2026-07-07T00:34:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/922316211dc70cfb68e6551f400a8343b1f8b5d93fe02d6d22afa951d72c2171"}
{"level":"info","ts":"2026-07-07T00:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83c8ecfe3b0c132964f3bccfc244259776fc062a97e0c86d0f6b8b60ac4cd8e7"}
{"level":"info","ts":"2026-07-07T00:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5867ddd8ecf237e1049f06caf0f6092fbf6fab6fac91fd1fdad8d2536be59ab"}