{"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a7e24abc067f218d2efbb617edd2964e9be9732821068039c5ff791d6322c5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a7e24abc067f218d2efbb617edd2964e9be9732821068039c5ff791d6322c5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1"}
{"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a7e24abc067f218d2efbb617edd2964e9be9732821068039c5ff791d6322c5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a7e24abc067f218d2efbb617edd2964e9be9732821068039c5ff791d6322c5a"}
{"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a7e24abc067f218d2efbb617edd2964e9be9732821068039c5ff791d6322c5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1"}
{"level":"error","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a7e24abc067f218d2efbb617edd2964e9be9732821068039c5ff791d6322c5a"}
{"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1"}
{"level":"error","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1"}
{"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128"}
{"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128"}
{"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1"}
{"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128"}
{"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1"}
{"level":"error","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128"}
{"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128"}
{"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1"}
{"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128"}
{"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128"}
{"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128"}
{"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128"}
{"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128"}
{"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b"}
{"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b"}
{"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5cfbb26dd17c44b75a525a277408b8d465725219897d4a9c8d2f8e8b4e25f16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5cfbb26dd17c44b75a525a277408b8d465725219897d4a9c8d2f8e8b4e25f16"}
{"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5cfbb26dd17c44b75a525a277408b8d465725219897d4a9c8d2f8e8b4e25f16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5cfbb26dd17c44b75a525a277408b8d465725219897d4a9c8d2f8e8b4e25f16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5cfbb26dd17c44b75a525a277408b8d465725219897d4a9c8d2f8e8b4e25f16"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b"}
{"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5cfbb26dd17c44b75a525a277408b8d465725219897d4a9c8d2f8e8b4e25f16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5cfbb26dd17c44b75a525a277408b8d465725219897d4a9c8d2f8e8b4e25f16"}
{"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5cfbb26dd17c44b75a525a277408b8d465725219897d4a9c8d2f8e8b4e25f16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b"}
{"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81ce7da7798f9fda506aec9a31dbfa64d2549082e494d919871de311b4a8cd9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5cfbb26dd17c44b75a525a277408b8d465725219897d4a9c8d2f8e8b4e25f16"}
{"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b"}
{"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81ce7da7798f9fda506aec9a31dbfa64d2549082e494d919871de311b4a8cd9f"}
{"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5"}
{"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5"}
{"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5"}
{"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5"}
{"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5"}
{"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5"}
{"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5"}
{"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d"}
{"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5"}
{"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5"}
{"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5"}
{"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78c1848c5a8c3a826586c1e429aaa829979f9cbe7db3e58221d1ea3be4b3b974","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5"}
{"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78c1848c5a8c3a826586c1e429aaa829979f9cbe7db3e58221d1ea3be4b3b974"}
{"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5"}
{"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c1e76c90c216855500030f734ad523b64333c93ee9a7ea234721d4a04c5a2cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5"}
{"level":"info","ts":"2026-07-07T11:06:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c1e76c90c216855500030f734ad523b64333c93ee9a7ea234721d4a04c5a2cf"}
{"level":"debug","ts":"2026-07-07T11:06:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T11:06:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5"}
{"level":"debug","ts":"2026-07-07T11:06:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db37da09cd9be228bb2efb6d08f86a6f6831ac9ede1bfb1705008cc8c9bdae78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T11:06:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5"}
{"level":"debug","ts":"2026-07-07T11:06:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45c9aaa54c8bd68c208ffabf508db4b515535c09709e473e6b841a9890990e53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T11:06:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db37da09cd9be228bb2efb6d08f86a6f6831ac9ede1bfb1705008cc8c9bdae78"}
{"level":"debug","ts":"2026-07-07T11:06:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fea9f84b8a3507fcdcc06528bccd1193885aeb7552befd18bf796e941e679cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45c9aaa54c8bd68c208ffabf508db4b515535c09709e473e6b841a9890990e53"}
{"level":"info","ts":"2026-07-07T11:06:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T11:06:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fea9f84b8a3507fcdcc06528bccd1193885aeb7552befd18bf796e941e679cf"}
{"level":"info","ts":"2026-07-07T11:06:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5"}
{"level":"debug","ts":"2026-07-07T11:06:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7a160f7d077dd00c042e4ade9e29f7cbbe4636f34a6728c77446fc5d6386739","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T11:06:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7a160f7d077dd00c042e4ade9e29f7cbbe4636f34a6728c77446fc5d6386739"}
{"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6"}
{"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6"}
{"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a7e24abc067f218d2efbb617edd2964e9be9732821068039c5ff791d6322c5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6"}
{"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a7e24abc067f218d2efbb617edd2964e9be9732821068039c5ff791d6322c5a"}
{"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6"}
{"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6"}
{"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6"}
{"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57"}
{"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6"}
{"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755"}
{"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755"}
{"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5c4c8c8fbd19e87ab253c78dfbce9c00965aa7c2fe31b0c355f5f02463fb2e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5c4c8c8fbd19e87ab253c78dfbce9c00965aa7c2fe31b0c355f5f02463fb2e9"}
{"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5c4c8c8fbd19e87ab253c78dfbce9c00965aa7c2fe31b0c355f5f02463fb2e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5c4c8c8fbd19e87ab253c78dfbce9c00965aa7c2fe31b0c355f5f02463fb2e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5c4c8c8fbd19e87ab253c78dfbce9c00965aa7c2fe31b0c355f5f02463fb2e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755"}
{"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5c4c8c8fbd19e87ab253c78dfbce9c00965aa7c2fe31b0c355f5f02463fb2e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5c4c8c8fbd19e87ab253c78dfbce9c00965aa7c2fe31b0c355f5f02463fb2e9"}
{"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5c4c8c8fbd19e87ab253c78dfbce9c00965aa7c2fe31b0c355f5f02463fb2e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755"}
{"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5c4c8c8fbd19e87ab253c78dfbce9c00965aa7c2fe31b0c355f5f02463fb2e9"}
{"level":"error","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b809344687679605c7fc5b5bda5036064bb72af3207f4714809b6e1d972b92a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755"}
{"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b809344687679605c7fc5b5bda5036064bb72af3207f4714809b6e1d972b92a3"}
{"level":"error","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755"}
{"level":"error","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755"}
{"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128"}
{"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128"}
{"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755"}
{"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"712c0654324455c21e56733d2bba5a51df12015c14f627a39f1ed96385568585","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1"}
{"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128"}
{"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/712c0654324455c21e56733d2bba5a51df12015c14f627a39f1ed96385568585"}
{"level":"info","ts":"2026-07-07T11:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1"}
{"level":"info","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4221e097-6c6e-481e-9f5b-339788c0bd92","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38956","PortSpecifier":{"PortValue":38956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4221e097-6c6e-481e-9f5b-339788c0bd92","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4221e097-6c6e-481e-9f5b-339788c0bd92","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38956","PortSpecifier":{"PortValue":38956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783422409,"nanos":753412936},"http":{"id":"4221e097-6c6e-481e-9f5b-339788c0bd92","method":"POST","headers":{":authority":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4221e097-6c6e-481e-9f5b-339788c0bd92","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4221e097-6c6e-481e-9f5b-339788c0bd92","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"]}}
{"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4221e097-6c6e-481e-9f5b-339788c0bd92","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0c1e76c90c216855500030f734ad523b64333c93ee9a7ea234721d4a04c5a2cf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4221e097-6c6e-481e-9f5b-339788c0bd92","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4221e097-6c6e-481e-9f5b-339788c0bd92","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4221e097-6c6e-481e-9f5b-339788c0bd92","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4221e097-6c6e-481e-9f5b-339788c0bd92","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4221e097-6c6e-481e-9f5b-339788c0bd92","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4221e097-6c6e-481e-9f5b-339788c0bd92","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4221e097-6c6e-481e-9f5b-339788c0bd92","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4221e097-6c6e-481e-9f5b-339788c0bd92","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7354bd09-229a-43f6-a3d5-41e492088c8f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:41752","PortSpecifier":{"PortValue":41752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7354bd09-229a-43f6-a3d5-41e492088c8f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7354bd09-229a-43f6-a3d5-41e492088c8f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:41752","PortSpecifier":{"PortValue":41752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783422409,"nanos":793504864},"http":{"id":"7354bd09-229a-43f6-a3d5-41e492088c8f","method":"POST","headers":{":authority":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7354bd09-229a-43f6-a3d5-41e492088c8f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7354bd09-229a-43f6-a3d5-41e492088c8f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"]}}
{"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7354bd09-229a-43f6-a3d5-41e492088c8f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7354bd09-229a-43f6-a3d5-41e492088c8f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7354bd09-229a-43f6-a3d5-41e492088c8f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7354bd09-229a-43f6-a3d5-41e492088c8f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2a3633/rate-test-model-2a3633\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7354bd09-229a-43f6-a3d5-41e492088c8f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7354bd09-229a-43f6-a3d5-41e492088c8f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7354bd09-229a-43f6-a3d5-41e492088c8f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7354bd09-229a-43f6-a3d5-41e492088c8f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7354bd09-229a-43f6-a3d5-41e492088c8f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"45d18d82-f464-4fe0-8820-54aaf1af3312","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38970","PortSpecifier":{"PortValue":38970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"45d18d82-f464-4fe0-8820-54aaf1af3312","method":"POST","path":"/ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de/v1/completions","host":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"45d18d82-f464-4fe0-8820-54aaf1af3312","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38970","PortSpecifier":{"PortValue":38970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783422409,"nanos":831466899},"http":{"id":"45d18d82-f464-4fe0-8820-54aaf1af3312","method":"POST","headers":{":authority":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"45d18d82-f464-4fe0-8820-54aaf1af3312","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ATWumPUgTDa5lTjw_gg9sfF0hhbvR1GlQPiIVEFp9MTee56TsvV5AaI6vcxz"}
{"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"45d18d82-f464-4fe0-8820-54aaf1af3312","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ATWumPUgTDa5lTjw_gg9sfF0hhbvR1GlQPiIVEFp9MTee56TsvV5AaI6vcxz\"}"}
{"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"45d18d82-f464-4fe0-8820-54aaf1af3312","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9d513268-3797-4660-b606-0d5d17ae61a7","keyName":"e2e-rate-a-d268d6","subscription":"e2e-rate-iso-a-d268d6","tenant":"e2e-shared-a-1273de","userId":"9d513268-3797-4660-b606-0d5d17ae61a7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"45d18d82-f464-4fe0-8820-54aaf1af3312","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de\",\"requestedSubscription\":\"e2e-rate-iso-a-d268d6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"45d18d82-f464-4fe0-8820-54aaf1af3312","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-1273de","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d268d6","namespace":"ai-tenant-e2e-shared-a-1273de","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"45d18d82-f464-4fe0-8820-54aaf1af3312","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45d18d82-f464-4fe0-8820-54aaf1af3312","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45d18d82-f464-4fe0-8820-54aaf1af3312","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45d18d82-f464-4fe0-8820-54aaf1af3312","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45d18d82-f464-4fe0-8820-54aaf1af3312","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45d18d82-f464-4fe0-8820-54aaf1af3312","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45d18d82-f464-4fe0-8820-54aaf1af3312","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d268d6"}
{"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45d18d82-f464-4fe0-8820-54aaf1af3312","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45d18d82-f464-4fe0-8820-54aaf1af3312","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9d513268-3797-4660-b606-0d5d17ae61a7","keyName":"e2e-rate-a-d268d6","selected_subscription":"e2e-rate-iso-a-d268d6","selected_subscription_key":"ai-tenant-e2e-shared-a-1273de/e2e-rate-iso-a-d268d6@ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-1273de","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d268d6","namespace":"ai-tenant-e2e-shared-a-1273de","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"45d18d82-f464-4fe0-8820-54aaf1af3312","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"45d18d82-f464-4fe0-8820-54aaf1af3312","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T11:06:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1879039b-0edc-4a7f-b4a0-90d10f7063e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38978","PortSpecifier":{"PortValue":38978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1879039b-0edc-4a7f-b4a0-90d10f7063e5","method":"POST","path":"/ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de/v1/completions","host":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T11:06:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1879039b-0edc-4a7f-b4a0-90d10f7063e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38978","PortSpecifier":{"PortValue":38978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783422410,"nanos":889982378},"http":{"id":"1879039b-0edc-4a7f-b4a0-90d10f7063e5","method":"POST","headers":{":authority":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T11:06:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1879039b-0edc-4a7f-b4a0-90d10f7063e5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ATWumPUgTDa5lTjw_gg9sfF0hhbvR1GlQPiIVEFp9MTee56TsvV5AaI6vcxz"}
{"level":"debug","ts":"2026-07-07T11:06:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1879039b-0edc-4a7f-b4a0-90d10f7063e5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ATWumPUgTDa5lTjw_gg9sfF0hhbvR1GlQPiIVEFp9MTee56TsvV5AaI6vcxz\"}"}
{"level":"debug","ts":"2026-07-07T11:06:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1879039b-0edc-4a7f-b4a0-90d10f7063e5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9d513268-3797-4660-b606-0d5d17ae61a7","keyName":"e2e-rate-a-d268d6","subscription":"e2e-rate-iso-a-d268d6","tenant":"e2e-shared-a-1273de","userId":"9d513268-3797-4660-b606-0d5d17ae61a7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T11:06:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1879039b-0edc-4a7f-b4a0-90d10f7063e5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de\",\"requestedSubscription\":\"e2e-rate-iso-a-d268d6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T11:06:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1879039b-0edc-4a7f-b4a0-90d10f7063e5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-1273de","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d268d6","namespace":"ai-tenant-e2e-shared-a-1273de","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T11:06:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1879039b-0edc-4a7f-b4a0-90d10f7063e5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T11:06:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1879039b-0edc-4a7f-b4a0-90d10f7063e5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T11:06:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1879039b-0edc-4a7f-b4a0-90d10f7063e5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T11:06:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1879039b-0edc-4a7f-b4a0-90d10f7063e5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T11:06:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1879039b-0edc-4a7f-b4a0-90d10f7063e5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T11:06:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1879039b-0edc-4a7f-b4a0-90d10f7063e5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T11:06:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1879039b-0edc-4a7f-b4a0-90d10f7063e5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d268d6"}
{"level":"debug","ts":"2026-07-07T11:06:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1879039b-0edc-4a7f-b4a0-90d10f7063e5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T11:06:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1879039b-0edc-4a7f-b4a0-90d10f7063e5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9d513268-3797-4660-b606-0d5d17ae61a7","keyName":"e2e-rate-a-d268d6","selected_subscription":"e2e-rate-iso-a-d268d6","selected_subscription_key":"ai-tenant-e2e-shared-a-1273de/e2e-rate-iso-a-d268d6@ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-1273de","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d268d6","namespace":"ai-tenant-e2e-shared-a-1273de","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T11:06:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1879039b-0edc-4a7f-b4a0-90d10f7063e5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T11:06:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1879039b-0edc-4a7f-b4a0-90d10f7063e5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T11:06:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ee66053c-ca31-414d-b3d2-6785921f2f0a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38984","PortSpecifier":{"PortValue":38984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ee66053c-ca31-414d-b3d2-6785921f2f0a","method":"POST","path":"/ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de/v1/completions","host":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T11:06:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ee66053c-ca31-414d-b3d2-6785921f2f0a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38984","PortSpecifier":{"PortValue":38984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783422411,"nanos":928016630},"http":{"id":"ee66053c-ca31-414d-b3d2-6785921f2f0a","method":"POST","headers":{":authority":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T11:06:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ee66053c-ca31-414d-b3d2-6785921f2f0a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ATWumPUgTDa5lTjw_gg9sfF0hhbvR1GlQPiIVEFp9MTee56TsvV5AaI6vcxz"}
{"level":"debug","ts":"2026-07-07T11:06:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ee66053c-ca31-414d-b3d2-6785921f2f0a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ATWumPUgTDa5lTjw_gg9sfF0hhbvR1GlQPiIVEFp9MTee56TsvV5AaI6vcxz\"}"}
{"level":"debug","ts":"2026-07-07T11:06:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ee66053c-ca31-414d-b3d2-6785921f2f0a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9d513268-3797-4660-b606-0d5d17ae61a7","keyName":"e2e-rate-a-d268d6","subscription":"e2e-rate-iso-a-d268d6","tenant":"e2e-shared-a-1273de","userId":"9d513268-3797-4660-b606-0d5d17ae61a7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T11:06:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ee66053c-ca31-414d-b3d2-6785921f2f0a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de\",\"requestedSubscription\":\"e2e-rate-iso-a-d268d6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T11:06:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ee66053c-ca31-414d-b3d2-6785921f2f0a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-1273de","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d268d6","namespace":"ai-tenant-e2e-shared-a-1273de","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T11:06:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ee66053c-ca31-414d-b3d2-6785921f2f0a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T11:06:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee66053c-ca31-414d-b3d2-6785921f2f0a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T11:06:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee66053c-ca31-414d-b3d2-6785921f2f0a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T11:06:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee66053c-ca31-414d-b3d2-6785921f2f0a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T11:06:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee66053c-ca31-414d-b3d2-6785921f2f0a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T11:06:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee66053c-ca31-414d-b3d2-6785921f2f0a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T11:06:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee66053c-ca31-414d-b3d2-6785921f2f0a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d268d6"}
{"level":"debug","ts":"2026-07-07T11:06:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee66053c-ca31-414d-b3d2-6785921f2f0a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T11:06:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee66053c-ca31-414d-b3d2-6785921f2f0a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9d513268-3797-4660-b606-0d5d17ae61a7","keyName":"e2e-rate-a-d268d6","selected_subscription":"e2e-rate-iso-a-d268d6","selected_subscription_key":"ai-tenant-e2e-shared-a-1273de/e2e-rate-iso-a-d268d6@ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-1273de","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d268d6","namespace":"ai-tenant-e2e-shared-a-1273de","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T11:06:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ee66053c-ca31-414d-b3d2-6785921f2f0a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T11:06:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ee66053c-ca31-414d-b3d2-6785921f2f0a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"801e3562-8aaa-4a43-8723-91154d5b0218","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55512","PortSpecifier":{"PortValue":55512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"801e3562-8aaa-4a43-8723-91154d5b0218","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"801e3562-8aaa-4a43-8723-91154d5b0218","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55512","PortSpecifier":{"PortValue":55512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783422422,"nanos":685482485},"http":{"id":"801e3562-8aaa-4a43-8723-91154d5b0218","method":"POST","headers":{":authority":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"801e3562-8aaa-4a43-8723-91154d5b0218","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"801e3562-8aaa-4a43-8723-91154d5b0218","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"]}}
{"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"801e3562-8aaa-4a43-8723-91154d5b0218","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0c1e76c90c216855500030f734ad523b64333c93ee9a7ea234721d4a04c5a2cf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"801e3562-8aaa-4a43-8723-91154d5b0218","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"801e3562-8aaa-4a43-8723-91154d5b0218","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"801e3562-8aaa-4a43-8723-91154d5b0218","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"801e3562-8aaa-4a43-8723-91154d5b0218","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"801e3562-8aaa-4a43-8723-91154d5b0218","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"801e3562-8aaa-4a43-8723-91154d5b0218","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"801e3562-8aaa-4a43-8723-91154d5b0218","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"801e3562-8aaa-4a43-8723-91154d5b0218","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd6c4c7b-8129-4a45-81a8-1bd03a5f26d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59158","PortSpecifier":{"PortValue":59158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cd6c4c7b-8129-4a45-81a8-1bd03a5f26d3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd6c4c7b-8129-4a45-81a8-1bd03a5f26d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59158","PortSpecifier":{"PortValue":59158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783422422,"nanos":761046701},"http":{"id":"cd6c4c7b-8129-4a45-81a8-1bd03a5f26d3","method":"POST","headers":{":authority":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cd6c4c7b-8129-4a45-81a8-1bd03a5f26d3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cd6c4c7b-8129-4a45-81a8-1bd03a5f26d3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"]}}
{"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cd6c4c7b-8129-4a45-81a8-1bd03a5f26d3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd6c4c7b-8129-4a45-81a8-1bd03a5f26d3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd6c4c7b-8129-4a45-81a8-1bd03a5f26d3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd6c4c7b-8129-4a45-81a8-1bd03a5f26d3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2a3633/rate-test-model-2a3633\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cd6c4c7b-8129-4a45-81a8-1bd03a5f26d3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd6c4c7b-8129-4a45-81a8-1bd03a5f26d3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd6c4c7b-8129-4a45-81a8-1bd03a5f26d3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd6c4c7b-8129-4a45-81a8-1bd03a5f26d3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd6c4c7b-8129-4a45-81a8-1bd03a5f26d3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc9907c6-d36f-4234-b5f0-b23ec7176b67","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55528","PortSpecifier":{"PortValue":55528}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dc9907c6-d36f-4234-b5f0-b23ec7176b67","method":"POST","path":"/ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de/v1/completions","host":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc9907c6-d36f-4234-b5f0-b23ec7176b67","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55528","PortSpecifier":{"PortValue":55528}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783422422,"nanos":796871270},"http":{"id":"dc9907c6-d36f-4234-b5f0-b23ec7176b67","method":"POST","headers":{":authority":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dc9907c6-d36f-4234-b5f0-b23ec7176b67","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1YWxhNT5ogancOXYH_194oNuHr63x8B5LQHXmSIC0JYfAEkXsZYkwq9oIHPJD"}
{"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dc9907c6-d36f-4234-b5f0-b23ec7176b67","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1YWxhNT5ogancOXYH_194oNuHr63x8B5LQHXmSIC0JYfAEkXsZYkwq9oIHPJD\"}"}
{"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dc9907c6-d36f-4234-b5f0-b23ec7176b67","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2ac14303-3a43-41ef-aa7f-014ddd69910e","keyName":"e2e-rate-a-019a4a","subscription":"e2e-rate-iso-a-019a4a","tenant":"e2e-shared-a-1273de","userId":"2ac14303-3a43-41ef-aa7f-014ddd69910e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dc9907c6-d36f-4234-b5f0-b23ec7176b67","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de\",\"requestedSubscription\":\"e2e-rate-iso-a-019a4a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dc9907c6-d36f-4234-b5f0-b23ec7176b67","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-1273de","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-019a4a","namespace":"ai-tenant-e2e-shared-a-1273de","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dc9907c6-d36f-4234-b5f0-b23ec7176b67","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc9907c6-d36f-4234-b5f0-b23ec7176b67","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc9907c6-d36f-4234-b5f0-b23ec7176b67","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc9907c6-d36f-4234-b5f0-b23ec7176b67","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc9907c6-d36f-4234-b5f0-b23ec7176b67","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc9907c6-d36f-4234-b5f0-b23ec7176b67","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc9907c6-d36f-4234-b5f0-b23ec7176b67","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-019a4a"}
{"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc9907c6-d36f-4234-b5f0-b23ec7176b67","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc9907c6-d36f-4234-b5f0-b23ec7176b67","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2ac14303-3a43-41ef-aa7f-014ddd69910e","keyName":"e2e-rate-a-019a4a","selected_subscription":"e2e-rate-iso-a-019a4a","selected_subscription_key":"ai-tenant-e2e-shared-a-1273de/e2e-rate-iso-a-019a4a@ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-1273de","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-019a4a","namespace":"ai-tenant-e2e-shared-a-1273de","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc9907c6-d36f-4234-b5f0-b23ec7176b67","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc9907c6-d36f-4234-b5f0-b23ec7176b67","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T11:07:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d10cfbc2-ffd3-4517-9e22-f6ac1898c725","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55536","PortSpecifier":{"PortValue":55536}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d10cfbc2-ffd3-4517-9e22-f6ac1898c725","method":"POST","path":"/ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de/v1/completions","host":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T11:07:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d10cfbc2-ffd3-4517-9e22-f6ac1898c725","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55536","PortSpecifier":{"PortValue":55536}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783422423,"nanos":835997005},"http":{"id":"d10cfbc2-ffd3-4517-9e22-f6ac1898c725","method":"POST","headers":{":authority":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T11:07:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d10cfbc2-ffd3-4517-9e22-f6ac1898c725","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1YWxhNT5ogancOXYH_194oNuHr63x8B5LQHXmSIC0JYfAEkXsZYkwq9oIHPJD"}
{"level":"debug","ts":"2026-07-07T11:07:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d10cfbc2-ffd3-4517-9e22-f6ac1898c725","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1YWxhNT5ogancOXYH_194oNuHr63x8B5LQHXmSIC0JYfAEkXsZYkwq9oIHPJD\"}"}
{"level":"debug","ts":"2026-07-07T11:07:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d10cfbc2-ffd3-4517-9e22-f6ac1898c725","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2ac14303-3a43-41ef-aa7f-014ddd69910e","keyName":"e2e-rate-a-019a4a","subscription":"e2e-rate-iso-a-019a4a","tenant":"e2e-shared-a-1273de","userId":"2ac14303-3a43-41ef-aa7f-014ddd69910e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T11:07:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d10cfbc2-ffd3-4517-9e22-f6ac1898c725","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de\",\"requestedSubscription\":\"e2e-rate-iso-a-019a4a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T11:07:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d10cfbc2-ffd3-4517-9e22-f6ac1898c725","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-1273de","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-019a4a","namespace":"ai-tenant-e2e-shared-a-1273de","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T11:07:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d10cfbc2-ffd3-4517-9e22-f6ac1898c725","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T11:07:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d10cfbc2-ffd3-4517-9e22-f6ac1898c725","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T11:07:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d10cfbc2-ffd3-4517-9e22-f6ac1898c725","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T11:07:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d10cfbc2-ffd3-4517-9e22-f6ac1898c725","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T11:07:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d10cfbc2-ffd3-4517-9e22-f6ac1898c725","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T11:07:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d10cfbc2-ffd3-4517-9e22-f6ac1898c725","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T11:07:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d10cfbc2-ffd3-4517-9e22-f6ac1898c725","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-019a4a"}
{"level":"debug","ts":"2026-07-07T11:07:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d10cfbc2-ffd3-4517-9e22-f6ac1898c725","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T11:07:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d10cfbc2-ffd3-4517-9e22-f6ac1898c725","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2ac14303-3a43-41ef-aa7f-014ddd69910e","keyName":"e2e-rate-a-019a4a","selected_subscription":"e2e-rate-iso-a-019a4a","selected_subscription_key":"ai-tenant-e2e-shared-a-1273de/e2e-rate-iso-a-019a4a@ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-1273de","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-019a4a","namespace":"ai-tenant-e2e-shared-a-1273de","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T11:07:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d10cfbc2-ffd3-4517-9e22-f6ac1898c725","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T11:07:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d10cfbc2-ffd3-4517-9e22-f6ac1898c725","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6de58f4-b4bf-40e0-86cf-e5418525d133","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55548","PortSpecifier":{"PortValue":55548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f6de58f4-b4bf-40e0-86cf-e5418525d133","method":"POST","path":"/ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de/v1/completions","host":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6de58f4-b4bf-40e0-86cf-e5418525d133","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55548","PortSpecifier":{"PortValue":55548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783422424,"nanos":873016751},"http":{"id":"f6de58f4-b4bf-40e0-86cf-e5418525d133","method":"POST","headers":{":authority":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f6de58f4-b4bf-40e0-86cf-e5418525d133","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1YWxhNT5ogancOXYH_194oNuHr63x8B5LQHXmSIC0JYfAEkXsZYkwq9oIHPJD"}
{"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f6de58f4-b4bf-40e0-86cf-e5418525d133","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1YWxhNT5ogancOXYH_194oNuHr63x8B5LQHXmSIC0JYfAEkXsZYkwq9oIHPJD\"}"}
{"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f6de58f4-b4bf-40e0-86cf-e5418525d133","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2ac14303-3a43-41ef-aa7f-014ddd69910e","keyName":"e2e-rate-a-019a4a","subscription":"e2e-rate-iso-a-019a4a","tenant":"e2e-shared-a-1273de","userId":"2ac14303-3a43-41ef-aa7f-014ddd69910e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f6de58f4-b4bf-40e0-86cf-e5418525d133","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de\",\"requestedSubscription\":\"e2e-rate-iso-a-019a4a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f6de58f4-b4bf-40e0-86cf-e5418525d133","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-1273de","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-019a4a","namespace":"ai-tenant-e2e-shared-a-1273de","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f6de58f4-b4bf-40e0-86cf-e5418525d133","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6de58f4-b4bf-40e0-86cf-e5418525d133","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6de58f4-b4bf-40e0-86cf-e5418525d133","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6de58f4-b4bf-40e0-86cf-e5418525d133","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6de58f4-b4bf-40e0-86cf-e5418525d133","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6de58f4-b4bf-40e0-86cf-e5418525d133","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6de58f4-b4bf-40e0-86cf-e5418525d133","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-019a4a"}
{"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6de58f4-b4bf-40e0-86cf-e5418525d133","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6de58f4-b4bf-40e0-86cf-e5418525d133","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2ac14303-3a43-41ef-aa7f-014ddd69910e","keyName":"e2e-rate-a-019a4a","selected_subscription":"e2e-rate-iso-a-019a4a","selected_subscription_key":"ai-tenant-e2e-shared-a-1273de/e2e-rate-iso-a-019a4a@ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-1273de","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-019a4a","namespace":"ai-tenant-e2e-shared-a-1273de","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6de58f4-b4bf-40e0-86cf-e5418525d133","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6de58f4-b4bf-40e0-86cf-e5418525d133","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6b2d0a8-72cb-444e-9ce5-2255ae15b445","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59168","PortSpecifier":{"PortValue":59168}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f6b2d0a8-72cb-444e-9ce5-2255ae15b445","method":"POST","path":"/ai-tenant-e2e-shared-b-2a3633/rate-test-model-2a3633/v1/completions","host":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6b2d0a8-72cb-444e-9ce5-2255ae15b445","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59168","PortSpecifier":{"PortValue":59168}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783422424,"nanos":907366529},"http":{"id":"f6b2d0a8-72cb-444e-9ce5-2255ae15b445","method":"POST","headers":{":authority":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-2a3633/rate-test-model-2a3633/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f6b2d0a8-72cb-444e-9ce5-2255ae15b445","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yS7MuAeM2S47DLcS_3voJ9KmbifqhqHFqQq8N5eIfwBah6X8k4V5eABLXNSQ"}
{"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f6b2d0a8-72cb-444e-9ce5-2255ae15b445","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-2a3633.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yS7MuAeM2S47DLcS_3voJ9KmbifqhqHFqQq8N5eIfwBah6X8k4V5eABLXNSQ\"}"}
{"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f6b2d0a8-72cb-444e-9ce5-2255ae15b445","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-2a3633.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3421a804-1110-4310-b4d9-38fffa464851","keyName":"e2e-rate-b-019a4a","subscription":"e2e-rate-iso-b-019a4a","tenant":"e2e-shared-b-2a3633","userId":"3421a804-1110-4310-b4d9-38fffa464851","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f6b2d0a8-72cb-444e-9ce5-2255ae15b445","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-2a3633.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-2a3633/rate-test-model-2a3633\",\"requestedSubscription\":\"e2e-rate-iso-b-019a4a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f6b2d0a8-72cb-444e-9ce5-2255ae15b445","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-2a3633.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2a3633","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-019a4a","namespace":"ai-tenant-e2e-shared-b-2a3633","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f6b2d0a8-72cb-444e-9ce5-2255ae15b445","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6b2d0a8-72cb-444e-9ce5-2255ae15b445","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6b2d0a8-72cb-444e-9ce5-2255ae15b445","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6b2d0a8-72cb-444e-9ce5-2255ae15b445","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6b2d0a8-72cb-444e-9ce5-2255ae15b445","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2a3633/rate-test-model-2a3633\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6b2d0a8-72cb-444e-9ce5-2255ae15b445","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6b2d0a8-72cb-444e-9ce5-2255ae15b445","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-019a4a"}
{"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6b2d0a8-72cb-444e-9ce5-2255ae15b445","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6b2d0a8-72cb-444e-9ce5-2255ae15b445","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3421a804-1110-4310-b4d9-38fffa464851","keyName":"e2e-rate-b-019a4a","selected_subscription":"e2e-rate-iso-b-019a4a","selected_subscription_key":"ai-tenant-e2e-shared-b-2a3633/e2e-rate-iso-b-019a4a@ai-tenant-e2e-shared-b-2a3633/rate-test-model-2a3633","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2a3633","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-019a4a","namespace":"ai-tenant-e2e-shared-b-2a3633","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6b2d0a8-72cb-444e-9ce5-2255ae15b445","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6b2d0a8-72cb-444e-9ce5-2255ae15b445","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T11:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/712c0654324455c21e56733d2bba5a51df12015c14f627a39f1ed96385568585"}
{"level":"info","ts":"2026-07-07T11:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a7e24abc067f218d2efbb617edd2964e9be9732821068039c5ff791d6322c5a"}
{"level":"info","ts":"2026-07-07T11:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81ce7da7798f9fda506aec9a31dbfa64d2549082e494d919871de311b4a8cd9f"}
{"level":"info","ts":"2026-07-07T11:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b"}
{"level":"info","ts":"2026-07-07T11:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1fea9f84b8a3507fcdcc06528bccd1193885aeb7552befd18bf796e941e679cf"}
{"level":"info","ts":"2026-07-07T11:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6"}
{"level":"info","ts":"2026-07-07T11:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b809344687679605c7fc5b5bda5036064bb72af3207f4714809b6e1d972b92a3"}
{"level":"info","ts":"2026-07-07T11:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78c1848c5a8c3a826586c1e429aaa829979f9cbe7db3e58221d1ea3be4b3b974"}
{"level":"info","ts":"2026-07-07T11:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5cfbb26dd17c44b75a525a277408b8d465725219897d4a9c8d2f8e8b4e25f16"}
{"level":"info","ts":"2026-07-07T11:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1"}
{"level":"info","ts":"2026-07-07T11:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5c4c8c8fbd19e87ab253c78dfbce9c00965aa7c2fe31b0c355f5f02463fb2e9"}
{"level":"info","ts":"2026-07-07T11:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128"}
{"level":"info","ts":"2026-07-07T11:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0c1e76c90c216855500030f734ad523b64333c93ee9a7ea234721d4a04c5a2cf"}
{"level":"info","ts":"2026-07-07T11:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7a160f7d077dd00c042e4ade9e29f7cbbe4636f34a6728c77446fc5d6386739"}
{"level":"info","ts":"2026-07-07T11:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d"}
{"level":"info","ts":"2026-07-07T11:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45c9aaa54c8bd68c208ffabf508db4b515535c09709e473e6b841a9890990e53"}
{"level":"info","ts":"2026-07-07T11:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5"}
{"level":"info","ts":"2026-07-07T11:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db37da09cd9be228bb2efb6d08f86a6f6831ac9ede1bfb1705008cc8c9bdae78"}
{"level":"info","ts":"2026-07-07T11:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755"}
{"level":"info","ts":"2026-07-07T11:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57"}