--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-10T02:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/825002ac55029419e89e2fc4119811cbd2f8263b7a6f2dd9cba95a25c2e69179"}
{"level":"debug","ts":"2026-07-10T02:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"825002ac55029419e89e2fc4119811cbd2f8263b7a6f2dd9cba95a25c2e69179","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ed4d4f8769522f9bb80b9e1561683e349b5e2541b86b898042f290c32594f1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:50:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ed4d4f8769522f9bb80b9e1561683e349b5e2541b86b898042f290c32594f1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ed4d4f8769522f9bb80b9e1561683e349b5e2541b86b898042f290c32594f1e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/825002ac55029419e89e2fc4119811cbd2f8263b7a6f2dd9cba95a25c2e69179"}
{"level":"debug","ts":"2026-07-10T02:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"825002ac55029419e89e2fc4119811cbd2f8263b7a6f2dd9cba95a25c2e69179","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:50:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:50:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["825002ac55029419e89e2fc4119811cbd2f8263b7a6f2dd9cba95a25c2e69179"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"825002ac55029419e89e2fc4119811cbd2f8263b7a6f2dd9cba95a25c2e69179","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ed4d4f8769522f9bb80b9e1561683e349b5e2541b86b898042f290c32594f1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:50:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ed4d4f8769522f9bb80b9e1561683e349b5e2541b86b898042f290c32594f1e"}
{"level":"info","ts":"2026-07-10T02:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ed4d4f8769522f9bb80b9e1561683e349b5e2541b86b898042f290c32594f1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"825002ac55029419e89e2fc4119811cbd2f8263b7a6f2dd9cba95a25c2e69179","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:50:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/825002ac55029419e89e2fc4119811cbd2f8263b7a6f2dd9cba95a25c2e69179"}
{"level":"info","ts":"2026-07-10T02:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"825002ac55029419e89e2fc4119811cbd2f8263b7a6f2dd9cba95a25c2e69179","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ed4d4f8769522f9bb80b9e1561683e349b5e2541b86b898042f290c32594f1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"825002ac55029419e89e2fc4119811cbd2f8263b7a6f2dd9cba95a25c2e69179","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:50:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:50:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["825002ac55029419e89e2fc4119811cbd2f8263b7a6f2dd9cba95a25c2e69179"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"825002ac55029419e89e2fc4119811cbd2f8263b7a6f2dd9cba95a25c2e69179","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ed4d4f8769522f9bb80b9e1561683e349b5e2541b86b898042f290c32594f1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"825002ac55029419e89e2fc4119811cbd2f8263b7a6f2dd9cba95a25c2e69179","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:50:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:50:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["825002ac55029419e89e2fc4119811cbd2f8263b7a6f2dd9cba95a25c2e69179"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ed4d4f8769522f9bb80b9e1561683e349b5e2541b86b898042f290c32594f1e"}
{"level":"error","ts":"2026-07-10T02:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"825002ac55029419e89e2fc4119811cbd2f8263b7a6f2dd9cba95a25c2e69179","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"825002ac55029419e89e2fc4119811cbd2f8263b7a6f2dd9cba95a25c2e69179\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T02:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"825002ac55029419e89e2fc4119811cbd2f8263b7a6f2dd9cba95a25c2e69179","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:50:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"825002ac55029419e89e2fc4119811cbd2f8263b7a6f2dd9cba95a25c2e69179","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"825002ac55029419e89e2fc4119811cbd2f8263b7a6f2dd9cba95a25c2e69179","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:50:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T02:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"825002ac55029419e89e2fc4119811cbd2f8263b7a6f2dd9cba95a25c2e69179","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"825002ac55029419e89e2fc4119811cbd2f8263b7a6f2dd9cba95a25c2e69179\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T02:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"825002ac55029419e89e2fc4119811cbd2f8263b7a6f2dd9cba95a25c2e69179","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/825002ac55029419e89e2fc4119811cbd2f8263b7a6f2dd9cba95a25c2e69179"}
{"level":"debug","ts":"2026-07-10T02:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"825002ac55029419e89e2fc4119811cbd2f8263b7a6f2dd9cba95a25c2e69179","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/825002ac55029419e89e2fc4119811cbd2f8263b7a6f2dd9cba95a25c2e69179"}
{"level":"debug","ts":"2026-07-10T02:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ed4d4f8769522f9bb80b9e1561683e349b5e2541b86b898042f290c32594f1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:50:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:50:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ed4d4f8769522f9bb80b9e1561683e349b5e2541b86b898042f290c32594f1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ed4d4f8769522f9bb80b9e1561683e349b5e2541b86b898042f290c32594f1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ed4d4f8769522f9bb80b9e1561683e349b5e2541b86b898042f290c32594f1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"825002ac55029419e89e2fc4119811cbd2f8263b7a6f2dd9cba95a25c2e69179","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:50:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:50:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["825002ac55029419e89e2fc4119811cbd2f8263b7a6f2dd9cba95a25c2e69179"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ed4d4f8769522f9bb80b9e1561683e349b5e2541b86b898042f290c32594f1e"}
{"level":"info","ts":"2026-07-10T02:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"825002ac55029419e89e2fc4119811cbd2f8263b7a6f2dd9cba95a25c2e69179","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"825002ac55029419e89e2fc4119811cbd2f8263b7a6f2dd9cba95a25c2e69179","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:50:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"825002ac55029419e89e2fc4119811cbd2f8263b7a6f2dd9cba95a25c2e69179","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"825002ac55029419e89e2fc4119811cbd2f8263b7a6f2dd9cba95a25c2e69179","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"825002ac55029419e89e2fc4119811cbd2f8263b7a6f2dd9cba95a25c2e69179","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/825002ac55029419e89e2fc4119811cbd2f8263b7a6f2dd9cba95a25c2e69179"}
{"level":"debug","ts":"2026-07-10T02:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"825002ac55029419e89e2fc4119811cbd2f8263b7a6f2dd9cba95a25c2e69179","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/825002ac55029419e89e2fc4119811cbd2f8263b7a6f2dd9cba95a25c2e69179"}
{"level":"debug","ts":"2026-07-10T02:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"825002ac55029419e89e2fc4119811cbd2f8263b7a6f2dd9cba95a25c2e69179","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:50:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:50:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["825002ac55029419e89e2fc4119811cbd2f8263b7a6f2dd9cba95a25c2e69179"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"825002ac55029419e89e2fc4119811cbd2f8263b7a6f2dd9cba95a25c2e69179","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"825002ac55029419e89e2fc4119811cbd2f8263b7a6f2dd9cba95a25c2e69179","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"825002ac55029419e89e2fc4119811cbd2f8263b7a6f2dd9cba95a25c2e69179","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09e479a297ec9af4a58062ecb9c839ebaa9fab2324cf2e4a07b0429f805dbb1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/825002ac55029419e89e2fc4119811cbd2f8263b7a6f2dd9cba95a25c2e69179"}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09e479a297ec9af4a58062ecb9c839ebaa9fab2324cf2e4a07b0429f805dbb1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"825002ac55029419e89e2fc4119811cbd2f8263b7a6f2dd9cba95a25c2e69179","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["825002ac55029419e89e2fc4119811cbd2f8263b7a6f2dd9cba95a25c2e69179"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09e479a297ec9af4a58062ecb9c839ebaa9fab2324cf2e4a07b0429f805dbb1e"}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"825002ac55029419e89e2fc4119811cbd2f8263b7a6f2dd9cba95a25c2e69179","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09e479a297ec9af4a58062ecb9c839ebaa9fab2324cf2e4a07b0429f805dbb1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09e479a297ec9af4a58062ecb9c839ebaa9fab2324cf2e4a07b0429f805dbb1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09e479a297ec9af4a58062ecb9c839ebaa9fab2324cf2e4a07b0429f805dbb1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"825002ac55029419e89e2fc4119811cbd2f8263b7a6f2dd9cba95a25c2e69179","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/825002ac55029419e89e2fc4119811cbd2f8263b7a6f2dd9cba95a25c2e69179"}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"825002ac55029419e89e2fc4119811cbd2f8263b7a6f2dd9cba95a25c2e69179","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09e479a297ec9af4a58062ecb9c839ebaa9fab2324cf2e4a07b0429f805dbb1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09e479a297ec9af4a58062ecb9c839ebaa9fab2324cf2e4a07b0429f805dbb1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"825002ac55029419e89e2fc4119811cbd2f8263b7a6f2dd9cba95a25c2e69179","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["825002ac55029419e89e2fc4119811cbd2f8263b7a6f2dd9cba95a25c2e69179"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09e479a297ec9af4a58062ecb9c839ebaa9fab2324cf2e4a07b0429f805dbb1e"}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"825002ac55029419e89e2fc4119811cbd2f8263b7a6f2dd9cba95a25c2e69179","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09e479a297ec9af4a58062ecb9c839ebaa9fab2324cf2e4a07b0429f805dbb1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09e479a297ec9af4a58062ecb9c839ebaa9fab2324cf2e4a07b0429f805dbb1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/825002ac55029419e89e2fc4119811cbd2f8263b7a6f2dd9cba95a25c2e69179"}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09e479a297ec9af4a58062ecb9c839ebaa9fab2324cf2e4a07b0429f805dbb1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"825002ac55029419e89e2fc4119811cbd2f8263b7a6f2dd9cba95a25c2e69179","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09e479a297ec9af4a58062ecb9c839ebaa9fab2324cf2e4a07b0429f805dbb1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09e479a297ec9af4a58062ecb9c839ebaa9fab2324cf2e4a07b0429f805dbb1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09e479a297ec9af4a58062ecb9c839ebaa9fab2324cf2e4a07b0429f805dbb1e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09e479a297ec9af4a58062ecb9c839ebaa9fab2324cf2e4a07b0429f805dbb1e"}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09e479a297ec9af4a58062ecb9c839ebaa9fab2324cf2e4a07b0429f805dbb1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09e479a297ec9af4a58062ecb9c839ebaa9fab2324cf2e4a07b0429f805dbb1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/825002ac55029419e89e2fc4119811cbd2f8263b7a6f2dd9cba95a25c2e69179"}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09e479a297ec9af4a58062ecb9c839ebaa9fab2324cf2e4a07b0429f805dbb1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09e479a297ec9af4a58062ecb9c839ebaa9fab2324cf2e4a07b0429f805dbb1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09e479a297ec9af4a58062ecb9c839ebaa9fab2324cf2e4a07b0429f805dbb1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09e479a297ec9af4a58062ecb9c839ebaa9fab2324cf2e4a07b0429f805dbb1e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09e479a297ec9af4a58062ecb9c839ebaa9fab2324cf2e4a07b0429f805dbb1e"}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09e479a297ec9af4a58062ecb9c839ebaa9fab2324cf2e4a07b0429f805dbb1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09e479a297ec9af4a58062ecb9c839ebaa9fab2324cf2e4a07b0429f805dbb1e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09e479a297ec9af4a58062ecb9c839ebaa9fab2324cf2e4a07b0429f805dbb1e"}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c"}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09e479a297ec9af4a58062ecb9c839ebaa9fab2324cf2e4a07b0429f805dbb1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09e479a297ec9af4a58062ecb9c839ebaa9fab2324cf2e4a07b0429f805dbb1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c"}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09e479a297ec9af4a58062ecb9c839ebaa9fab2324cf2e4a07b0429f805dbb1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09e479a297ec9af4a58062ecb9c839ebaa9fab2324cf2e4a07b0429f805dbb1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09e479a297ec9af4a58062ecb9c839ebaa9fab2324cf2e4a07b0429f805dbb1e"}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09e479a297ec9af4a58062ecb9c839ebaa9fab2324cf2e4a07b0429f805dbb1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09e479a297ec9af4a58062ecb9c839ebaa9fab2324cf2e4a07b0429f805dbb1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09e479a297ec9af4a58062ecb9c839ebaa9fab2324cf2e4a07b0429f805dbb1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c"}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09e479a297ec9af4a58062ecb9c839ebaa9fab2324cf2e4a07b0429f805dbb1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"934b8ef0ce5726dff3a1a8f288ac94756697944c9d00465a2883eb733ee78522","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09e479a297ec9af4a58062ecb9c839ebaa9fab2324cf2e4a07b0429f805dbb1e"}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"934b8ef0ce5726dff3a1a8f288ac94756697944c9d00465a2883eb733ee78522","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09e479a297ec9af4a58062ecb9c839ebaa9fab2324cf2e4a07b0429f805dbb1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"934b8ef0ce5726dff3a1a8f288ac94756697944c9d00465a2883eb733ee78522","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/934b8ef0ce5726dff3a1a8f288ac94756697944c9d00465a2883eb733ee78522"}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"934b8ef0ce5726dff3a1a8f288ac94756697944c9d00465a2883eb733ee78522","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c"}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"934b8ef0ce5726dff3a1a8f288ac94756697944c9d00465a2883eb733ee78522","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["934b8ef0ce5726dff3a1a8f288ac94756697944c9d00465a2883eb733ee78522"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"934b8ef0ce5726dff3a1a8f288ac94756697944c9d00465a2883eb733ee78522","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09e479a297ec9af4a58062ecb9c839ebaa9fab2324cf2e4a07b0429f805dbb1e"}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"934b8ef0ce5726dff3a1a8f288ac94756697944c9d00465a2883eb733ee78522","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/934b8ef0ce5726dff3a1a8f288ac94756697944c9d00465a2883eb733ee78522"}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"934b8ef0ce5726dff3a1a8f288ac94756697944c9d00465a2883eb733ee78522","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"621fe045a7953de468b49b960edeb17ca015e260751e5af80bc07b506b04bc46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"621fe045a7953de468b49b960edeb17ca015e260751e5af80bc07b506b04bc46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c"}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/621fe045a7953de468b49b960edeb17ca015e260751e5af80bc07b506b04bc46"}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"934b8ef0ce5726dff3a1a8f288ac94756697944c9d00465a2883eb733ee78522","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"621fe045a7953de468b49b960edeb17ca015e260751e5af80bc07b506b04bc46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["621fe045a7953de468b49b960edeb17ca015e260751e5af80bc07b506b04bc46"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/934b8ef0ce5726dff3a1a8f288ac94756697944c9d00465a2883eb733ee78522"}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c"}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"621fe045a7953de468b49b960edeb17ca015e260751e5af80bc07b506b04bc46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13031bb16d04f6ebbf3399e33ab04943fa34a8f6cb55f41c48ec741b32d37691"}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/621fe045a7953de468b49b960edeb17ca015e260751e5af80bc07b506b04bc46"}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"934b8ef0ce5726dff3a1a8f288ac94756697944c9d00465a2883eb733ee78522","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["934b8ef0ce5726dff3a1a8f288ac94756697944c9d00465a2883eb733ee78522"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c"}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"934b8ef0ce5726dff3a1a8f288ac94756697944c9d00465a2883eb733ee78522","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13031bb16d04f6ebbf3399e33ab04943fa34a8f6cb55f41c48ec741b32d37691","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13031bb16d04f6ebbf3399e33ab04943fa34a8f6cb55f41c48ec741b32d37691"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1be48b708c8377b7641f97117e33cb56d922509631d0f5e709279279fb051e85"}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/707f119cecb60316a9e2712014924194bd19c0409d7d9d67cbba125818f9e572"}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13031bb16d04f6ebbf3399e33ab04943fa34a8f6cb55f41c48ec741b32d37691","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"621fe045a7953de468b49b960edeb17ca015e260751e5af80bc07b506b04bc46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1be48b708c8377b7641f97117e33cb56d922509631d0f5e709279279fb051e85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1be48b708c8377b7641f97117e33cb56d922509631d0f5e709279279fb051e85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/934b8ef0ce5726dff3a1a8f288ac94756697944c9d00465a2883eb733ee78522"}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1be48b708c8377b7641f97117e33cb56d922509631d0f5e709279279fb051e85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"707f119cecb60316a9e2712014924194bd19c0409d7d9d67cbba125818f9e572","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["707f119cecb60316a9e2712014924194bd19c0409d7d9d67cbba125818f9e572"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13031bb16d04f6ebbf3399e33ab04943fa34a8f6cb55f41c48ec741b32d37691"}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"707f119cecb60316a9e2712014924194bd19c0409d7d9d67cbba125818f9e572","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"934b8ef0ce5726dff3a1a8f288ac94756697944c9d00465a2883eb733ee78522","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13031bb16d04f6ebbf3399e33ab04943fa34a8f6cb55f41c48ec741b32d37691","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1be48b708c8377b7641f97117e33cb56d922509631d0f5e709279279fb051e85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1be48b708c8377b7641f97117e33cb56d922509631d0f5e709279279fb051e85"}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/707f119cecb60316a9e2712014924194bd19c0409d7d9d67cbba125818f9e572"}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1be48b708c8377b7641f97117e33cb56d922509631d0f5e709279279fb051e85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"707f119cecb60316a9e2712014924194bd19c0409d7d9d67cbba125818f9e572","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1be48b708c8377b7641f97117e33cb56d922509631d0f5e709279279fb051e85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1be48b708c8377b7641f97117e33cb56d922509631d0f5e709279279fb051e85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1be48b708c8377b7641f97117e33cb56d922509631d0f5e709279279fb051e85"}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1be48b708c8377b7641f97117e33cb56d922509631d0f5e709279279fb051e85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1be48b708c8377b7641f97117e33cb56d922509631d0f5e709279279fb051e85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1be48b708c8377b7641f97117e33cb56d922509631d0f5e709279279fb051e85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1be48b708c8377b7641f97117e33cb56d922509631d0f5e709279279fb051e85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1be48b708c8377b7641f97117e33cb56d922509631d0f5e709279279fb051e85"}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1be48b708c8377b7641f97117e33cb56d922509631d0f5e709279279fb051e85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1be48b708c8377b7641f97117e33cb56d922509631d0f5e709279279fb051e85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1be48b708c8377b7641f97117e33cb56d922509631d0f5e709279279fb051e85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1be48b708c8377b7641f97117e33cb56d922509631d0f5e709279279fb051e85"}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1be48b708c8377b7641f97117e33cb56d922509631d0f5e709279279fb051e85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1be48b708c8377b7641f97117e33cb56d922509631d0f5e709279279fb051e85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1be48b708c8377b7641f97117e33cb56d922509631d0f5e709279279fb051e85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1be48b708c8377b7641f97117e33cb56d922509631d0f5e709279279fb051e85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:50:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1be48b708c8377b7641f97117e33cb56d922509631d0f5e709279279fb051e85"}
{"level":"info","ts":"2026-07-10T02:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1be48b708c8377b7641f97117e33cb56d922509631d0f5e709279279fb051e85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1be48b708c8377b7641f97117e33cb56d922509631d0f5e709279279fb051e85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1be48b708c8377b7641f97117e33cb56d922509631d0f5e709279279fb051e85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1be48b708c8377b7641f97117e33cb56d922509631d0f5e709279279fb051e85"}
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1be48b708c8377b7641f97117e33cb56d922509631d0f5e709279279fb051e85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:50:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:50:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1be48b708c8377b7641f97117e33cb56d922509631d0f5e709279279fb051e85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1be48b708c8377b7641f97117e33cb56d922509631d0f5e709279279fb051e85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1be48b708c8377b7641f97117e33cb56d922509631d0f5e709279279fb051e85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:50:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:50:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1be48b708c8377b7641f97117e33cb56d922509631d0f5e709279279fb051e85"}
{"level":"info","ts":"2026-07-10T02:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1be48b708c8377b7641f97117e33cb56d922509631d0f5e709279279fb051e85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1be48b708c8377b7641f97117e33cb56d922509631d0f5e709279279fb051e85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1be48b708c8377b7641f97117e33cb56d922509631d0f5e709279279fb051e85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1be48b708c8377b7641f97117e33cb56d922509631d0f5e709279279fb051e85"}
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1be48b708c8377b7641f97117e33cb56d922509631d0f5e709279279fb051e85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:50:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:50:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1be48b708c8377b7641f97117e33cb56d922509631d0f5e709279279fb051e85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1be48b708c8377b7641f97117e33cb56d922509631d0f5e709279279fb051e85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1be48b708c8377b7641f97117e33cb56d922509631d0f5e709279279fb051e85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:50:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:50:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1be48b708c8377b7641f97117e33cb56d922509631d0f5e709279279fb051e85"}
{"level":"info","ts":"2026-07-10T02:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1be48b708c8377b7641f97117e33cb56d922509631d0f5e709279279fb051e85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1be48b708c8377b7641f97117e33cb56d922509631d0f5e709279279fb051e85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1be48b708c8377b7641f97117e33cb56d922509631d0f5e709279279fb051e85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1be48b708c8377b7641f97117e33cb56d922509631d0f5e709279279fb051e85"}
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1be48b708c8377b7641f97117e33cb56d922509631d0f5e709279279fb051e85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:50:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:50:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1be48b708c8377b7641f97117e33cb56d922509631d0f5e709279279fb051e85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1be48b708c8377b7641f97117e33cb56d922509631d0f5e709279279fb051e85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1be48b708c8377b7641f97117e33cb56d922509631d0f5e709279279fb051e85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1be48b708c8377b7641f97117e33cb56d922509631d0f5e709279279fb051e85"}
{"level":"info","ts":"2026-07-10T02:50:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8699893e-7ced-4c80-9bc7-81a6f4c32a6d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:42046","PortSpecifier":{"PortValue":42046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8699893e-7ced-4c80-9bc7-81a6f4c32a6d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8699893e-7ced-4c80-9bc7-81a6f4c32a6d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:42046","PortSpecifier":{"PortValue":42046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783651834,"nanos":632554914},"http":{"id":"8699893e-7ced-4c80-9bc7-81a6f4c32a6d","method":"POST","headers":{":authority":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8699893e-7ced-4c80-9bc7-81a6f4c32a6d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8699893e-7ced-4c80-9bc7-81a6f4c32a6d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f57a24c5-3349-4201-bb76-57629a222ea1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ecdb5a27-a9da-408c-8428-a399f0e5aa0e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9f5c3fb617ad"]}}
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8699893e-7ced-4c80-9bc7-81a6f4c32a6d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9f5c3fb617ad"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ecdb5a27-a9da-408c-8428-a399f0e5aa0e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f57a24c5-3349-4201-bb76-57629a222ea1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7b0414b83283b9dac3a6c6ecb0ee13025e9c7f368f0503f8e009e14c2555a374"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8699893e-7ced-4c80-9bc7-81a6f4c32a6d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8699893e-7ced-4c80-9bc7-81a6f4c32a6d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8699893e-7ced-4c80-9bc7-81a6f4c32a6d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b98a/auth-test-model-d5b98a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8699893e-7ced-4c80-9bc7-81a6f4c32a6d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8699893e-7ced-4c80-9bc7-81a6f4c32a6d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8699893e-7ced-4c80-9bc7-81a6f4c32a6d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T02:50:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8699893e-7ced-4c80-9bc7-81a6f4c32a6d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8699893e-7ced-4c80-9bc7-81a6f4c32a6d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:50:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6954943-a043-49b1-a5b5-6dd833548be8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:52268","PortSpecifier":{"PortValue":52268}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a6954943-a043-49b1-a5b5-6dd833548be8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-de8279.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6954943-a043-49b1-a5b5-6dd833548be8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:52268","PortSpecifier":{"PortValue":52268}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783651834,"nanos":694330921},"http":{"id":"a6954943-a043-49b1-a5b5-6dd833548be8","method":"POST","headers":{":authority":"e2e-shared-b-de8279.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a6954943-a043-49b1-a5b5-6dd833548be8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a6954943-a043-49b1-a5b5-6dd833548be8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f57a24c5-3349-4201-bb76-57629a222ea1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ecdb5a27-a9da-408c-8428-a399f0e5aa0e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9f5c3fb617ad"]}}
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a6954943-a043-49b1-a5b5-6dd833548be8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9f5c3fb617ad"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ecdb5a27-a9da-408c-8428-a399f0e5aa0e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f57a24c5-3349-4201-bb76-57629a222ea1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"621fe045a7953de468b49b960edeb17ca015e260751e5af80bc07b506b04bc46"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-de8279.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6954943-a043-49b1-a5b5-6dd833548be8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6954943-a043-49b1-a5b5-6dd833548be8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6954943-a043-49b1-a5b5-6dd833548be8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-de8279/auth-test-model-de8279\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a6954943-a043-49b1-a5b5-6dd833548be8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6954943-a043-49b1-a5b5-6dd833548be8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6954943-a043-49b1-a5b5-6dd833548be8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T02:50:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6954943-a043-49b1-a5b5-6dd833548be8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6954943-a043-49b1-a5b5-6dd833548be8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:50:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39278362-7cae-45a2-8e7b-c557898c361f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:42052","PortSpecifier":{"PortValue":42052}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"39278362-7cae-45a2-8e7b-c557898c361f","method":"GET","path":"/maas-api/v1/api-keys/76184c4a-3905-403b-a970-063b6f06d771","host":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39278362-7cae-45a2-8e7b-c557898c361f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:42052","PortSpecifier":{"PortValue":42052}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783651834,"nanos":754935028},"http":{"id":"39278362-7cae-45a2-8e7b-c557898c361f","method":"GET","headers":{":authority":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/76184c4a-3905-403b-a970-063b6f06d771",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"39278362-7cae-45a2-8e7b-c557898c361f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"39278362-7cae-45a2-8e7b-c557898c361f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f57a24c5-3349-4201-bb76-57629a222ea1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ecdb5a27-a9da-408c-8428-a399f0e5aa0e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9f5c3fb617ad"]}}
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"39278362-7cae-45a2-8e7b-c557898c361f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9f5c3fb617ad"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ecdb5a27-a9da-408c-8428-a399f0e5aa0e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f57a24c5-3349-4201-bb76-57629a222ea1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7b0414b83283b9dac3a6c6ecb0ee13025e9c7f368f0503f8e009e14c2555a374"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/76184c4a-3905-403b-a970-063b6f06d771",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39278362-7cae-45a2-8e7b-c557898c361f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39278362-7cae-45a2-8e7b-c557898c361f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39278362-7cae-45a2-8e7b-c557898c361f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b98a/auth-test-model-d5b98a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"39278362-7cae-45a2-8e7b-c557898c361f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39278362-7cae-45a2-8e7b-c557898c361f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39278362-7cae-45a2-8e7b-c557898c361f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T02:50:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39278362-7cae-45a2-8e7b-c557898c361f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39278362-7cae-45a2-8e7b-c557898c361f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:50:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc0d996a-3ec3-4fe1-b324-72388b369d9a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:52284","PortSpecifier":{"PortValue":52284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dc0d996a-3ec3-4fe1-b324-72388b369d9a","method":"GET","path":"/maas-api/v1/api-keys/a8a96c9e-975c-4d52-ad5f-8f6dc9a74cbd","host":"e2e-shared-b-de8279.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc0d996a-3ec3-4fe1-b324-72388b369d9a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:52284","PortSpecifier":{"PortValue":52284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783651834,"nanos":793010411},"http":{"id":"dc0d996a-3ec3-4fe1-b324-72388b369d9a","method":"GET","headers":{":authority":"e2e-shared-b-de8279.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a8a96c9e-975c-4d52-ad5f-8f6dc9a74cbd",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dc0d996a-3ec3-4fe1-b324-72388b369d9a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dc0d996a-3ec3-4fe1-b324-72388b369d9a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f57a24c5-3349-4201-bb76-57629a222ea1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ecdb5a27-a9da-408c-8428-a399f0e5aa0e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9f5c3fb617ad"]}}
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dc0d996a-3ec3-4fe1-b324-72388b369d9a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9f5c3fb617ad"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ecdb5a27-a9da-408c-8428-a399f0e5aa0e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f57a24c5-3349-4201-bb76-57629a222ea1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"621fe045a7953de468b49b960edeb17ca015e260751e5af80bc07b506b04bc46"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-de8279.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a8a96c9e-975c-4d52-ad5f-8f6dc9a74cbd",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc0d996a-3ec3-4fe1-b324-72388b369d9a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc0d996a-3ec3-4fe1-b324-72388b369d9a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc0d996a-3ec3-4fe1-b324-72388b369d9a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-de8279/auth-test-model-de8279\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dc0d996a-3ec3-4fe1-b324-72388b369d9a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc0d996a-3ec3-4fe1-b324-72388b369d9a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc0d996a-3ec3-4fe1-b324-72388b369d9a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T02:50:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc0d996a-3ec3-4fe1-b324-72388b369d9a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:50:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc0d996a-3ec3-4fe1-b324-72388b369d9a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:50:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52bf0c2e-6dbe-49c6-b742-3723b4623916","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:47514","PortSpecifier":{"PortValue":47514}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"52bf0c2e-6dbe-49c6-b742-3723b4623916","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:50:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52bf0c2e-6dbe-49c6-b742-3723b4623916","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:47514","PortSpecifier":{"PortValue":47514}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783651854,"nanos":232333959},"http":{"id":"52bf0c2e-6dbe-49c6-b742-3723b4623916","method":"POST","headers":{":authority":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:50:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"52bf0c2e-6dbe-49c6-b742-3723b4623916","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T02:50:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"52bf0c2e-6dbe-49c6-b742-3723b4623916","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f57a24c5-3349-4201-bb76-57629a222ea1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ecdb5a27-a9da-408c-8428-a399f0e5aa0e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9f5c3fb617ad"]}}
{"level":"debug","ts":"2026-07-10T02:50:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"52bf0c2e-6dbe-49c6-b742-3723b4623916","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9f5c3fb617ad"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ecdb5a27-a9da-408c-8428-a399f0e5aa0e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f57a24c5-3349-4201-bb76-57629a222ea1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7b0414b83283b9dac3a6c6ecb0ee13025e9c7f368f0503f8e009e14c2555a374"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:50:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52bf0c2e-6dbe-49c6-b742-3723b4623916","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:50:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52bf0c2e-6dbe-49c6-b742-3723b4623916","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:50:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52bf0c2e-6dbe-49c6-b742-3723b4623916","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b98a/auth-test-model-d5b98a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:50:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"52bf0c2e-6dbe-49c6-b742-3723b4623916","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T02:50:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52bf0c2e-6dbe-49c6-b742-3723b4623916","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T02:50:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52bf0c2e-6dbe-49c6-b742-3723b4623916","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T02:50:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52bf0c2e-6dbe-49c6-b742-3723b4623916","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:50:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52bf0c2e-6dbe-49c6-b742-3723b4623916","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:50:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bcdec40f-5d9a-4ab7-96e1-d0a42e7d27cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:46722","PortSpecifier":{"PortValue":46722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bcdec40f-5d9a-4ab7-96e1-d0a42e7d27cd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-de8279.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:50:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bcdec40f-5d9a-4ab7-96e1-d0a42e7d27cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:46722","PortSpecifier":{"PortValue":46722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783651854,"nanos":273496214},"http":{"id":"bcdec40f-5d9a-4ab7-96e1-d0a42e7d27cd","method":"POST","headers":{":authority":"e2e-shared-b-de8279.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:50:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bcdec40f-5d9a-4ab7-96e1-d0a42e7d27cd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T02:50:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bcdec40f-5d9a-4ab7-96e1-d0a42e7d27cd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f57a24c5-3349-4201-bb76-57629a222ea1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ecdb5a27-a9da-408c-8428-a399f0e5aa0e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9f5c3fb617ad"]}}
{"level":"debug","ts":"2026-07-10T02:50:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bcdec40f-5d9a-4ab7-96e1-d0a42e7d27cd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9f5c3fb617ad"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ecdb5a27-a9da-408c-8428-a399f0e5aa0e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f57a24c5-3349-4201-bb76-57629a222ea1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"621fe045a7953de468b49b960edeb17ca015e260751e5af80bc07b506b04bc46"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-de8279.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:50:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bcdec40f-5d9a-4ab7-96e1-d0a42e7d27cd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:50:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bcdec40f-5d9a-4ab7-96e1-d0a42e7d27cd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:50:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bcdec40f-5d9a-4ab7-96e1-d0a42e7d27cd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-de8279/auth-test-model-de8279\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:50:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bcdec40f-5d9a-4ab7-96e1-d0a42e7d27cd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T02:50:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bcdec40f-5d9a-4ab7-96e1-d0a42e7d27cd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:50:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bcdec40f-5d9a-4ab7-96e1-d0a42e7d27cd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T02:50:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bcdec40f-5d9a-4ab7-96e1-d0a42e7d27cd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:50:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bcdec40f-5d9a-4ab7-96e1-d0a42e7d27cd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:50:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9e1be2a-7532-44f1-8c7b-048805e4094f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:47522","PortSpecifier":{"PortValue":47522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e9e1be2a-7532-44f1-8c7b-048805e4094f","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:50:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9e1be2a-7532-44f1-8c7b-048805e4094f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:47522","PortSpecifier":{"PortValue":47522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783651854,"nanos":315022277},"http":{"id":"e9e1be2a-7532-44f1-8c7b-048805e4094f","method":"GET","headers":{":authority":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:50:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e9e1be2a-7532-44f1-8c7b-048805e4094f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-GLZ1zDATv5mBXqbB_Og0DmvuDidYIuyz4X8ucysHLfeUsYEUtRc1ASAQ92k7"}
{"level":"debug","ts":"2026-07-10T02:50:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e9e1be2a-7532-44f1-8c7b-048805e4094f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-GLZ1zDATv5mBXqbB_Og0DmvuDidYIuyz4X8ucysHLfeUsYEUtRc1ASAQ92k7\"}"}
{"level":"debug","ts":"2026-07-10T02:50:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e9e1be2a-7532-44f1-8c7b-048805e4094f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0c59713e-42c9-4c87-99dd-f66b70e95986","keyName":"e2e-auth-iso-a-363fd7","subscription":"e2e-auth-iso-3b9ff6","tenant":"e2e-shared-a-d5b98a","userId":"0c59713e-42c9-4c87-99dd-f66b70e95986","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T02:50:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e9e1be2a-7532-44f1-8c7b-048805e4094f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:50:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9e1be2a-7532-44f1-8c7b-048805e4094f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:50:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9e1be2a-7532-44f1-8c7b-048805e4094f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:50:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9e1be2a-7532-44f1-8c7b-048805e4094f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b98a/auth-test-model-d5b98a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:50:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e9e1be2a-7532-44f1-8c7b-048805e4094f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T02:50:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9e1be2a-7532-44f1-8c7b-048805e4094f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:50:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9e1be2a-7532-44f1-8c7b-048805e4094f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-3b9ff6"}
{"level":"debug","ts":"2026-07-10T02:50:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9e1be2a-7532-44f1-8c7b-048805e4094f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T02:50:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9e1be2a-7532-44f1-8c7b-048805e4094f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:50:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9e1be2a-7532-44f1-8c7b-048805e4094f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:51:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c0ed8255-12fd-45ec-bf21-e57277b0fb49","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:43430","PortSpecifier":{"PortValue":43430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c0ed8255-12fd-45ec-bf21-e57277b0fb49","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:51:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c0ed8255-12fd-45ec-bf21-e57277b0fb49","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:43430","PortSpecifier":{"PortValue":43430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783651871,"nanos":602550813},"http":{"id":"c0ed8255-12fd-45ec-bf21-e57277b0fb49","method":"POST","headers":{":authority":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:51:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c0ed8255-12fd-45ec-bf21-e57277b0fb49","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T02:51:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c0ed8255-12fd-45ec-bf21-e57277b0fb49","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f57a24c5-3349-4201-bb76-57629a222ea1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ecdb5a27-a9da-408c-8428-a399f0e5aa0e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9f5c3fb617ad"]}}
{"level":"debug","ts":"2026-07-10T02:51:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c0ed8255-12fd-45ec-bf21-e57277b0fb49","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9f5c3fb617ad"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ecdb5a27-a9da-408c-8428-a399f0e5aa0e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f57a24c5-3349-4201-bb76-57629a222ea1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7b0414b83283b9dac3a6c6ecb0ee13025e9c7f368f0503f8e009e14c2555a374"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:51:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0ed8255-12fd-45ec-bf21-e57277b0fb49","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:51:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0ed8255-12fd-45ec-bf21-e57277b0fb49","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:51:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0ed8255-12fd-45ec-bf21-e57277b0fb49","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b98a/auth-test-model-d5b98a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:51:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c0ed8255-12fd-45ec-bf21-e57277b0fb49","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T02:51:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0ed8255-12fd-45ec-bf21-e57277b0fb49","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:51:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0ed8255-12fd-45ec-bf21-e57277b0fb49","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T02:51:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c0ed8255-12fd-45ec-bf21-e57277b0fb49","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:51:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c0ed8255-12fd-45ec-bf21-e57277b0fb49","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:51:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"116c4bab-a53d-46a5-9910-a36781e57020","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:44480","PortSpecifier":{"PortValue":44480}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"116c4bab-a53d-46a5-9910-a36781e57020","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-de8279.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:51:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"116c4bab-a53d-46a5-9910-a36781e57020","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:44480","PortSpecifier":{"PortValue":44480}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783651871,"nanos":639392189},"http":{"id":"116c4bab-a53d-46a5-9910-a36781e57020","method":"POST","headers":{":authority":"e2e-shared-b-de8279.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:51:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"116c4bab-a53d-46a5-9910-a36781e57020","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T02:51:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"116c4bab-a53d-46a5-9910-a36781e57020","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f57a24c5-3349-4201-bb76-57629a222ea1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ecdb5a27-a9da-408c-8428-a399f0e5aa0e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9f5c3fb617ad"]}}
{"level":"debug","ts":"2026-07-10T02:51:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"116c4bab-a53d-46a5-9910-a36781e57020","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9f5c3fb617ad"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ecdb5a27-a9da-408c-8428-a399f0e5aa0e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f57a24c5-3349-4201-bb76-57629a222ea1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"621fe045a7953de468b49b960edeb17ca015e260751e5af80bc07b506b04bc46"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-de8279.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:51:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"116c4bab-a53d-46a5-9910-a36781e57020","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:51:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"116c4bab-a53d-46a5-9910-a36781e57020","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:51:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"116c4bab-a53d-46a5-9910-a36781e57020","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-de8279/auth-test-model-de8279\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:51:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"116c4bab-a53d-46a5-9910-a36781e57020","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T02:51:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"116c4bab-a53d-46a5-9910-a36781e57020","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:51:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"116c4bab-a53d-46a5-9910-a36781e57020","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T02:51:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"116c4bab-a53d-46a5-9910-a36781e57020","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:51:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"116c4bab-a53d-46a5-9910-a36781e57020","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:51:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf5c0359-202e-4836-b452-f795084149af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:44492","PortSpecifier":{"PortValue":44492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bf5c0359-202e-4836-b452-f795084149af","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-de8279.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:51:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf5c0359-202e-4836-b452-f795084149af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:44492","PortSpecifier":{"PortValue":44492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783651871,"nanos":678262635},"http":{"id":"bf5c0359-202e-4836-b452-f795084149af","method":"GET","headers":{":authority":"e2e-shared-b-de8279.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:51:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bf5c0359-202e-4836-b452-f795084149af","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-X8JxsQ8b1hVH5lNU_CpkNDVTL2g7F7jmKg7P2n8E5GrL02AET5a9RsKB3BaF"}
{"level":"debug","ts":"2026-07-10T02:51:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bf5c0359-202e-4836-b452-f795084149af","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-de8279.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-X8JxsQ8b1hVH5lNU_CpkNDVTL2g7F7jmKg7P2n8E5GrL02AET5a9RsKB3BaF\"}"}
{"level":"debug","ts":"2026-07-10T02:51:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bf5c0359-202e-4836-b452-f795084149af","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-de8279.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-10T02:51:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bf5c0359-202e-4836-b452-f795084149af","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"621fe045a7953de468b49b960edeb17ca015e260751e5af80bc07b506b04bc46"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-de8279.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:51:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf5c0359-202e-4836-b452-f795084149af","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:51:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"bf5c0359-202e-4836-b452-f795084149af","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-10T02:51:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf5c0359-202e-4836-b452-f795084149af","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-10T02:51:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf5c0359-202e-4836-b452-f795084149af","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-10T02:51:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e7fad95-1f08-4c6f-a20d-08c50a7cfa65","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:56368","PortSpecifier":{"PortValue":56368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0e7fad95-1f08-4c6f-a20d-08c50a7cfa65","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:51:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e7fad95-1f08-4c6f-a20d-08c50a7cfa65","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:56368","PortSpecifier":{"PortValue":56368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783651888,"nanos":954102728},"http":{"id":"0e7fad95-1f08-4c6f-a20d-08c50a7cfa65","method":"POST","headers":{":authority":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:51:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0e7fad95-1f08-4c6f-a20d-08c50a7cfa65","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T02:51:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0e7fad95-1f08-4c6f-a20d-08c50a7cfa65","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f57a24c5-3349-4201-bb76-57629a222ea1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ecdb5a27-a9da-408c-8428-a399f0e5aa0e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9f5c3fb617ad"]}}
{"level":"debug","ts":"2026-07-10T02:51:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0e7fad95-1f08-4c6f-a20d-08c50a7cfa65","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9f5c3fb617ad"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ecdb5a27-a9da-408c-8428-a399f0e5aa0e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f57a24c5-3349-4201-bb76-57629a222ea1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7b0414b83283b9dac3a6c6ecb0ee13025e9c7f368f0503f8e009e14c2555a374"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:51:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e7fad95-1f08-4c6f-a20d-08c50a7cfa65","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:51:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e7fad95-1f08-4c6f-a20d-08c50a7cfa65","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:51:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e7fad95-1f08-4c6f-a20d-08c50a7cfa65","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b98a/auth-test-model-d5b98a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:51:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0e7fad95-1f08-4c6f-a20d-08c50a7cfa65","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T02:51:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e7fad95-1f08-4c6f-a20d-08c50a7cfa65","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:51:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e7fad95-1f08-4c6f-a20d-08c50a7cfa65","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T02:51:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e7fad95-1f08-4c6f-a20d-08c50a7cfa65","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:51:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e7fad95-1f08-4c6f-a20d-08c50a7cfa65","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:51:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d7e4eea-15d7-406c-ae59-8bc466200148","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:37540","PortSpecifier":{"PortValue":37540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8d7e4eea-15d7-406c-ae59-8bc466200148","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-de8279.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:51:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d7e4eea-15d7-406c-ae59-8bc466200148","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:37540","PortSpecifier":{"PortValue":37540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783651888,"nanos":990235426},"http":{"id":"8d7e4eea-15d7-406c-ae59-8bc466200148","method":"POST","headers":{":authority":"e2e-shared-b-de8279.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:51:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8d7e4eea-15d7-406c-ae59-8bc466200148","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T02:51:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8d7e4eea-15d7-406c-ae59-8bc466200148","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f57a24c5-3349-4201-bb76-57629a222ea1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ecdb5a27-a9da-408c-8428-a399f0e5aa0e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9f5c3fb617ad"]}}
{"level":"debug","ts":"2026-07-10T02:51:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8d7e4eea-15d7-406c-ae59-8bc466200148","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9f5c3fb617ad"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ecdb5a27-a9da-408c-8428-a399f0e5aa0e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f57a24c5-3349-4201-bb76-57629a222ea1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"621fe045a7953de468b49b960edeb17ca015e260751e5af80bc07b506b04bc46"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-de8279.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:51:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d7e4eea-15d7-406c-ae59-8bc466200148","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:51:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d7e4eea-15d7-406c-ae59-8bc466200148","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:51:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d7e4eea-15d7-406c-ae59-8bc466200148","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-de8279/auth-test-model-de8279\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:51:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8d7e4eea-15d7-406c-ae59-8bc466200148","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T02:51:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d7e4eea-15d7-406c-ae59-8bc466200148","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:51:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d7e4eea-15d7-406c-ae59-8bc466200148","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T02:51:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d7e4eea-15d7-406c-ae59-8bc466200148","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:51:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d7e4eea-15d7-406c-ae59-8bc466200148","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:51:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ac4c646-d4b0-4fe0-9341-d22ea4c98005","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:56384","PortSpecifier":{"PortValue":56384}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3ac4c646-d4b0-4fe0-9341-d22ea4c98005","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:51:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ac4c646-d4b0-4fe0-9341-d22ea4c98005","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:56384","PortSpecifier":{"PortValue":56384}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783651889,"nanos":31367495},"http":{"id":"3ac4c646-d4b0-4fe0-9341-d22ea4c98005","method":"POST","headers":{":authority":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:51:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3ac4c646-d4b0-4fe0-9341-d22ea4c98005","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T02:51:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3ac4c646-d4b0-4fe0-9341-d22ea4c98005","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f57a24c5-3349-4201-bb76-57629a222ea1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ecdb5a27-a9da-408c-8428-a399f0e5aa0e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9f5c3fb617ad"]}}
{"level":"debug","ts":"2026-07-10T02:51:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3ac4c646-d4b0-4fe0-9341-d22ea4c98005","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9f5c3fb617ad"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ecdb5a27-a9da-408c-8428-a399f0e5aa0e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f57a24c5-3349-4201-bb76-57629a222ea1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7b0414b83283b9dac3a6c6ecb0ee13025e9c7f368f0503f8e009e14c2555a374"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:51:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ac4c646-d4b0-4fe0-9341-d22ea4c98005","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:51:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ac4c646-d4b0-4fe0-9341-d22ea4c98005","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:51:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ac4c646-d4b0-4fe0-9341-d22ea4c98005","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b98a/auth-test-model-d5b98a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:51:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3ac4c646-d4b0-4fe0-9341-d22ea4c98005","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T02:51:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ac4c646-d4b0-4fe0-9341-d22ea4c98005","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T02:51:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ac4c646-d4b0-4fe0-9341-d22ea4c98005","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T02:51:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ac4c646-d4b0-4fe0-9341-d22ea4c98005","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:51:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ac4c646-d4b0-4fe0-9341-d22ea4c98005","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:51:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26349ca7-78fa-4b41-a7f7-3a87f03a7ca1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:37550","PortSpecifier":{"PortValue":37550}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"26349ca7-78fa-4b41-a7f7-3a87f03a7ca1","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-de8279.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:51:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26349ca7-78fa-4b41-a7f7-3a87f03a7ca1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:37550","PortSpecifier":{"PortValue":37550}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783651889,"nanos":69826433},"http":{"id":"26349ca7-78fa-4b41-a7f7-3a87f03a7ca1","method":"POST","headers":{":authority":"e2e-shared-b-de8279.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:51:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"26349ca7-78fa-4b41-a7f7-3a87f03a7ca1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T02:51:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"26349ca7-78fa-4b41-a7f7-3a87f03a7ca1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f57a24c5-3349-4201-bb76-57629a222ea1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ecdb5a27-a9da-408c-8428-a399f0e5aa0e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9f5c3fb617ad"]}}
{"level":"debug","ts":"2026-07-10T02:51:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"26349ca7-78fa-4b41-a7f7-3a87f03a7ca1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9f5c3fb617ad"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ecdb5a27-a9da-408c-8428-a399f0e5aa0e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f57a24c5-3349-4201-bb76-57629a222ea1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"621fe045a7953de468b49b960edeb17ca015e260751e5af80bc07b506b04bc46"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-de8279.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:51:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26349ca7-78fa-4b41-a7f7-3a87f03a7ca1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:51:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26349ca7-78fa-4b41-a7f7-3a87f03a7ca1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:51:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26349ca7-78fa-4b41-a7f7-3a87f03a7ca1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-de8279/auth-test-model-de8279\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:51:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"26349ca7-78fa-4b41-a7f7-3a87f03a7ca1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T02:51:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26349ca7-78fa-4b41-a7f7-3a87f03a7ca1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:51:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26349ca7-78fa-4b41-a7f7-3a87f03a7ca1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T02:51:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26349ca7-78fa-4b41-a7f7-3a87f03a7ca1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:51:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26349ca7-78fa-4b41-a7f7-3a87f03a7ca1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:51:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5482dca-abfb-4463-9ccb-477f35d14240","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:41350","PortSpecifier":{"PortValue":41350}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c5482dca-abfb-4463-9ccb-477f35d14240","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:51:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5482dca-abfb-4463-9ccb-477f35d14240","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:41350","PortSpecifier":{"PortValue":41350}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783651906,"nanos":406274116},"http":{"id":"c5482dca-abfb-4463-9ccb-477f35d14240","method":"POST","headers":{":authority":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:51:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c5482dca-abfb-4463-9ccb-477f35d14240","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T02:51:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c5482dca-abfb-4463-9ccb-477f35d14240","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f57a24c5-3349-4201-bb76-57629a222ea1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ecdb5a27-a9da-408c-8428-a399f0e5aa0e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9f5c3fb617ad"]}}
{"level":"debug","ts":"2026-07-10T02:51:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c5482dca-abfb-4463-9ccb-477f35d14240","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9f5c3fb617ad"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ecdb5a27-a9da-408c-8428-a399f0e5aa0e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f57a24c5-3349-4201-bb76-57629a222ea1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7b0414b83283b9dac3a6c6ecb0ee13025e9c7f368f0503f8e009e14c2555a374"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:51:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5482dca-abfb-4463-9ccb-477f35d14240","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:51:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5482dca-abfb-4463-9ccb-477f35d14240","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:51:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5482dca-abfb-4463-9ccb-477f35d14240","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b98a/auth-test-model-d5b98a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:51:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c5482dca-abfb-4463-9ccb-477f35d14240","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T02:51:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5482dca-abfb-4463-9ccb-477f35d14240","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:51:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5482dca-abfb-4463-9ccb-477f35d14240","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T02:51:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5482dca-abfb-4463-9ccb-477f35d14240","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:51:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5482dca-abfb-4463-9ccb-477f35d14240","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:51:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"94f19e61-13f6-4496-9604-9bed0c438aa6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59646","PortSpecifier":{"PortValue":59646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"94f19e61-13f6-4496-9604-9bed0c438aa6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-de8279.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:51:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"94f19e61-13f6-4496-9604-9bed0c438aa6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59646","PortSpecifier":{"PortValue":59646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783651906,"nanos":443032947},"http":{"id":"94f19e61-13f6-4496-9604-9bed0c438aa6","method":"POST","headers":{":authority":"e2e-shared-b-de8279.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:51:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"94f19e61-13f6-4496-9604-9bed0c438aa6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T02:51:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"94f19e61-13f6-4496-9604-9bed0c438aa6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f57a24c5-3349-4201-bb76-57629a222ea1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ecdb5a27-a9da-408c-8428-a399f0e5aa0e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9f5c3fb617ad"]}}
{"level":"debug","ts":"2026-07-10T02:51:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"94f19e61-13f6-4496-9604-9bed0c438aa6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9f5c3fb617ad"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ecdb5a27-a9da-408c-8428-a399f0e5aa0e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f57a24c5-3349-4201-bb76-57629a222ea1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"621fe045a7953de468b49b960edeb17ca015e260751e5af80bc07b506b04bc46"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-de8279.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:51:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94f19e61-13f6-4496-9604-9bed0c438aa6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:51:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94f19e61-13f6-4496-9604-9bed0c438aa6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:51:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94f19e61-13f6-4496-9604-9bed0c438aa6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-de8279/auth-test-model-de8279\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:51:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"94f19e61-13f6-4496-9604-9bed0c438aa6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T02:51:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94f19e61-13f6-4496-9604-9bed0c438aa6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:51:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94f19e61-13f6-4496-9604-9bed0c438aa6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T02:51:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"94f19e61-13f6-4496-9604-9bed0c438aa6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:51:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"94f19e61-13f6-4496-9604-9bed0c438aa6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:51:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3429eb20-527c-4d41-a96b-b75dbde40d99","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59654","PortSpecifier":{"PortValue":59654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3429eb20-527c-4d41-a96b-b75dbde40d99","method":"GET","path":"/maas-api/v1/api-keys/8b714ec0-01e3-44a3-b637-67aed408e2bc","host":"e2e-shared-b-de8279.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:51:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3429eb20-527c-4d41-a96b-b75dbde40d99","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59654","PortSpecifier":{"PortValue":59654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783651906,"nanos":481281197},"http":{"id":"3429eb20-527c-4d41-a96b-b75dbde40d99","method":"GET","headers":{":authority":"e2e-shared-b-de8279.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/8b714ec0-01e3-44a3-b637-67aed408e2bc",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:51:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3429eb20-527c-4d41-a96b-b75dbde40d99","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T02:51:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3429eb20-527c-4d41-a96b-b75dbde40d99","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f57a24c5-3349-4201-bb76-57629a222ea1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ecdb5a27-a9da-408c-8428-a399f0e5aa0e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9f5c3fb617ad"]}}
{"level":"debug","ts":"2026-07-10T02:51:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3429eb20-527c-4d41-a96b-b75dbde40d99","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9f5c3fb617ad"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ecdb5a27-a9da-408c-8428-a399f0e5aa0e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f57a24c5-3349-4201-bb76-57629a222ea1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"621fe045a7953de468b49b960edeb17ca015e260751e5af80bc07b506b04bc46"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-de8279.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/8b714ec0-01e3-44a3-b637-67aed408e2bc",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:51:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3429eb20-527c-4d41-a96b-b75dbde40d99","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:51:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3429eb20-527c-4d41-a96b-b75dbde40d99","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:51:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3429eb20-527c-4d41-a96b-b75dbde40d99","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-de8279/auth-test-model-de8279\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:51:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3429eb20-527c-4d41-a96b-b75dbde40d99","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T02:51:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3429eb20-527c-4d41-a96b-b75dbde40d99","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:51:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3429eb20-527c-4d41-a96b-b75dbde40d99","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T02:51:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3429eb20-527c-4d41-a96b-b75dbde40d99","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:51:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3429eb20-527c-4d41-a96b-b75dbde40d99","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:51:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f890b8a-6c94-4314-85e3-16280fd5386b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:41356","PortSpecifier":{"PortValue":41356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9f890b8a-6c94-4314-85e3-16280fd5386b","method":"GET","path":"/maas-api/v1/api-keys/8b714ec0-01e3-44a3-b637-67aed408e2bc","host":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:51:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f890b8a-6c94-4314-85e3-16280fd5386b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:41356","PortSpecifier":{"PortValue":41356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783651906,"nanos":517970503},"http":{"id":"9f890b8a-6c94-4314-85e3-16280fd5386b","method":"GET","headers":{":authority":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/8b714ec0-01e3-44a3-b637-67aed408e2bc",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:51:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9f890b8a-6c94-4314-85e3-16280fd5386b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T02:51:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9f890b8a-6c94-4314-85e3-16280fd5386b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f57a24c5-3349-4201-bb76-57629a222ea1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ecdb5a27-a9da-408c-8428-a399f0e5aa0e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9f5c3fb617ad"]}}
{"level":"debug","ts":"2026-07-10T02:51:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9f890b8a-6c94-4314-85e3-16280fd5386b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9f5c3fb617ad"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ecdb5a27-a9da-408c-8428-a399f0e5aa0e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f57a24c5-3349-4201-bb76-57629a222ea1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7b0414b83283b9dac3a6c6ecb0ee13025e9c7f368f0503f8e009e14c2555a374"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/8b714ec0-01e3-44a3-b637-67aed408e2bc",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:51:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f890b8a-6c94-4314-85e3-16280fd5386b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:51:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f890b8a-6c94-4314-85e3-16280fd5386b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:51:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f890b8a-6c94-4314-85e3-16280fd5386b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b98a/auth-test-model-d5b98a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:51:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9f890b8a-6c94-4314-85e3-16280fd5386b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T02:51:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f890b8a-6c94-4314-85e3-16280fd5386b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:51:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f890b8a-6c94-4314-85e3-16280fd5386b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T02:51:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f890b8a-6c94-4314-85e3-16280fd5386b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:51:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f890b8a-6c94-4314-85e3-16280fd5386b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:52:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9fcc2926-dbaf-4be1-88d9-243b6ad0ebc1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:50280","PortSpecifier":{"PortValue":50280}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9fcc2926-dbaf-4be1-88d9-243b6ad0ebc1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:52:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9fcc2926-dbaf-4be1-88d9-243b6ad0ebc1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:50280","PortSpecifier":{"PortValue":50280}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783651931,"nanos":84796453},"http":{"id":"9fcc2926-dbaf-4be1-88d9-243b6ad0ebc1","method":"POST","headers":{":authority":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:52:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9fcc2926-dbaf-4be1-88d9-243b6ad0ebc1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T02:52:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9fcc2926-dbaf-4be1-88d9-243b6ad0ebc1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f57a24c5-3349-4201-bb76-57629a222ea1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ecdb5a27-a9da-408c-8428-a399f0e5aa0e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9f5c3fb617ad"]}}
{"level":"debug","ts":"2026-07-10T02:52:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9fcc2926-dbaf-4be1-88d9-243b6ad0ebc1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9f5c3fb617ad"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ecdb5a27-a9da-408c-8428-a399f0e5aa0e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f57a24c5-3349-4201-bb76-57629a222ea1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7b0414b83283b9dac3a6c6ecb0ee13025e9c7f368f0503f8e009e14c2555a374"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:52:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fcc2926-dbaf-4be1-88d9-243b6ad0ebc1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:52:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fcc2926-dbaf-4be1-88d9-243b6ad0ebc1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:52:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fcc2926-dbaf-4be1-88d9-243b6ad0ebc1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b98a/auth-test-model-d5b98a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:52:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9fcc2926-dbaf-4be1-88d9-243b6ad0ebc1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T02:52:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9fcc2926-dbaf-4be1-88d9-243b6ad0ebc1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:52:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9fcc2926-dbaf-4be1-88d9-243b6ad0ebc1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T02:52:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9fcc2926-dbaf-4be1-88d9-243b6ad0ebc1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:52:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9fcc2926-dbaf-4be1-88d9-243b6ad0ebc1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:52:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"53abd639-9b87-4c82-962a-4e0668c99730","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:42712","PortSpecifier":{"PortValue":42712}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"53abd639-9b87-4c82-962a-4e0668c99730","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-de8279.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:52:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"53abd639-9b87-4c82-962a-4e0668c99730","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:42712","PortSpecifier":{"PortValue":42712}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783651931,"nanos":124827762},"http":{"id":"53abd639-9b87-4c82-962a-4e0668c99730","method":"POST","headers":{":authority":"e2e-shared-b-de8279.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:52:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"53abd639-9b87-4c82-962a-4e0668c99730","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T02:52:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"53abd639-9b87-4c82-962a-4e0668c99730","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f57a24c5-3349-4201-bb76-57629a222ea1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ecdb5a27-a9da-408c-8428-a399f0e5aa0e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9f5c3fb617ad"]}}
{"level":"debug","ts":"2026-07-10T02:52:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"53abd639-9b87-4c82-962a-4e0668c99730","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9f5c3fb617ad"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ecdb5a27-a9da-408c-8428-a399f0e5aa0e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f57a24c5-3349-4201-bb76-57629a222ea1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"621fe045a7953de468b49b960edeb17ca015e260751e5af80bc07b506b04bc46"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-de8279.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:52:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53abd639-9b87-4c82-962a-4e0668c99730","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:52:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53abd639-9b87-4c82-962a-4e0668c99730","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:52:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53abd639-9b87-4c82-962a-4e0668c99730","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-de8279/auth-test-model-de8279\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:52:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"53abd639-9b87-4c82-962a-4e0668c99730","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T02:52:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53abd639-9b87-4c82-962a-4e0668c99730","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:52:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53abd639-9b87-4c82-962a-4e0668c99730","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T02:52:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"53abd639-9b87-4c82-962a-4e0668c99730","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:52:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"53abd639-9b87-4c82-962a-4e0668c99730","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:52:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5a1f62fa-c158-493a-bb8f-19bba57ea4ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:50292","PortSpecifier":{"PortValue":50292}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5a1f62fa-c158-493a-bb8f-19bba57ea4ab","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:52:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5a1f62fa-c158-493a-bb8f-19bba57ea4ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:50292","PortSpecifier":{"PortValue":50292}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783651931,"nanos":162079798},"http":{"id":"5a1f62fa-c158-493a-bb8f-19bba57ea4ab","method":"POST","headers":{":authority":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:52:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5a1f62fa-c158-493a-bb8f-19bba57ea4ab","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vWGZGrETqMufYgJk_QqWzC4DYyg9AXhX0ZuWHuTWy9qx9daColPzr4lqTiB3"}
{"level":"debug","ts":"2026-07-10T02:52:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5a1f62fa-c158-493a-bb8f-19bba57ea4ab","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vWGZGrETqMufYgJk_QqWzC4DYyg9AXhX0ZuWHuTWy9qx9daColPzr4lqTiB3\"}"}
{"level":"debug","ts":"2026-07-10T02:52:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5a1f62fa-c158-493a-bb8f-19bba57ea4ab","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a3051344-a4b6-4459-8a48-691cb7b10872","keyName":"e2e-auth-iso-a-c3985c","subscription":"e2e-auth-iso-795e7f","tenant":"e2e-shared-a-d5b98a","userId":"a3051344-a4b6-4459-8a48-691cb7b10872","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T02:52:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5a1f62fa-c158-493a-bb8f-19bba57ea4ab","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:52:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a1f62fa-c158-493a-bb8f-19bba57ea4ab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:52:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a1f62fa-c158-493a-bb8f-19bba57ea4ab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:52:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a1f62fa-c158-493a-bb8f-19bba57ea4ab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b98a/auth-test-model-d5b98a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:52:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5a1f62fa-c158-493a-bb8f-19bba57ea4ab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T02:52:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a1f62fa-c158-493a-bb8f-19bba57ea4ab","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:52:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a1f62fa-c158-493a-bb8f-19bba57ea4ab","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T02:52:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a1f62fa-c158-493a-bb8f-19bba57ea4ab","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-795e7f"}
{"level":"info","ts":"2026-07-10T02:52:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5a1f62fa-c158-493a-bb8f-19bba57ea4ab","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:52:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5a1f62fa-c158-493a-bb8f-19bba57ea4ab","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0190954f9cc53fef57c6634325a6090b8f681d7b1d857fbf780ed096bbaf5aae"}
{"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/272f28aa858b57209656c947578c0bd379329c0e9235a65103a6a30353a8a718"}
{"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e99f6e4bb6ddd52621ebe5b47be8a9251aec8b9e402b04dad60273b7438e041"}
{"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/88da98aa6e91bcf822ec87bf6445cfeb296ded36a3c8dc5caf64d4968a08cf55"}
{"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/568afe8c64295a241498d6efce0f77d586c53e54734724e5b3675be4661a20d1"}
{"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0afa3866dda4ff8feee0300cd360cac8804e00454511ebb71a7842807b0b1942"}
{"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c848936c223ef888946f002c56c292dca744866546d1a733418b05e7926dd777"}
{"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/005a5cf563068cf1418bd99938205bb66fb307591c11d3a0ca67573e48c4c82c"}
{"level":"info","ts":"2026-07-10T02:52:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1be48b708c8377b7641f97117e33cb56d922509631d0f5e709279279fb051e85"}
{"level":"info","ts":"2026-07-10T02:52:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/934b8ef0ce5726dff3a1a8f288ac94756697944c9d00465a2883eb733ee78522"}
{"level":"info","ts":"2026-07-10T02:52:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4588499f9add4c2b6693c3bc45a7773610dbb5fab2d20268658006e68b593e69"}
{"level":"info","ts":"2026-07-10T02:52:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/09e479a297ec9af4a58062ecb9c839ebaa9fab2324cf2e4a07b0429f805dbb1e"}
{"level":"info","ts":"2026-07-10T02:52:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/08599854b702f28517ded6a2ec9de904ba63b5e80a1525985c434792df847cd3"}
{"level":"info","ts":"2026-07-10T02:52:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5d6756033278229b1830704ada795d36d1cb952a5e905a8114d44794130c13d"}
{"level":"info","ts":"2026-07-10T02:52:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/825002ac55029419e89e2fc4119811cbd2f8263b7a6f2dd9cba95a25c2e69179"}
{"level":"info","ts":"2026-07-10T02:52:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ed4d4f8769522f9bb80b9e1561683e349b5e2541b86b898042f290c32594f1e"}
{"level":"debug","ts":"2026-07-10T02:52:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:52:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:52:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e"}
{"level":"debug","ts":"2026-07-10T02:52:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:52:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e"}
{"level":"debug","ts":"2026-07-10T02:52:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5215c432136f6eeca3d220d37c4516a722064714a483b5dea5fed02122522c68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e"}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5215c432136f6eeca3d220d37c4516a722064714a483b5dea5fed02122522c68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5215c432136f6eeca3d220d37c4516a722064714a483b5dea5fed02122522c68"}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5215c432136f6eeca3d220d37c4516a722064714a483b5dea5fed02122522c68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5215c432136f6eeca3d220d37c4516a722064714a483b5dea5fed02122522c68"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5215c432136f6eeca3d220d37c4516a722064714a483b5dea5fed02122522c68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e"}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5215c432136f6eeca3d220d37c4516a722064714a483b5dea5fed02122522c68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5215c432136f6eeca3d220d37c4516a722064714a483b5dea5fed02122522c68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5215c432136f6eeca3d220d37c4516a722064714a483b5dea5fed02122522c68"}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5215c432136f6eeca3d220d37c4516a722064714a483b5dea5fed02122522c68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5215c432136f6eeca3d220d37c4516a722064714a483b5dea5fed02122522c68"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e"}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5215c432136f6eeca3d220d37c4516a722064714a483b5dea5fed02122522c68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5215c432136f6eeca3d220d37c4516a722064714a483b5dea5fed02122522c68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5215c432136f6eeca3d220d37c4516a722064714a483b5dea5fed02122522c68"}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5215c432136f6eeca3d220d37c4516a722064714a483b5dea5fed02122522c68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5215c432136f6eeca3d220d37c4516a722064714a483b5dea5fed02122522c68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5215c432136f6eeca3d220d37c4516a722064714a483b5dea5fed02122522c68"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18"}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5215c432136f6eeca3d220d37c4516a722064714a483b5dea5fed02122522c68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e"}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5215c432136f6eeca3d220d37c4516a722064714a483b5dea5fed02122522c68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5215c432136f6eeca3d220d37c4516a722064714a483b5dea5fed02122522c68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5215c432136f6eeca3d220d37c4516a722064714a483b5dea5fed02122522c68","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5215c432136f6eeca3d220d37c4516a722064714a483b5dea5fed02122522c68"}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5215c432136f6eeca3d220d37c4516a722064714a483b5dea5fed02122522c68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5215c432136f6eeca3d220d37c4516a722064714a483b5dea5fed02122522c68"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5215c432136f6eeca3d220d37c4516a722064714a483b5dea5fed02122522c68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5215c432136f6eeca3d220d37c4516a722064714a483b5dea5fed02122522c68","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18"}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5215c432136f6eeca3d220d37c4516a722064714a483b5dea5fed02122522c68"}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f602e0b046e0cab9a87e58b1513b81f5e3a05947748fe9be74dd5aa80bc44fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f602e0b046e0cab9a87e58b1513b81f5e3a05947748fe9be74dd5aa80bc44fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f602e0b046e0cab9a87e58b1513b81f5e3a05947748fe9be74dd5aa80bc44fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f602e0b046e0cab9a87e58b1513b81f5e3a05947748fe9be74dd5aa80bc44fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f602e0b046e0cab9a87e58b1513b81f5e3a05947748fe9be74dd5aa80bc44fb"}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f602e0b046e0cab9a87e58b1513b81f5e3a05947748fe9be74dd5aa80bc44fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f602e0b046e0cab9a87e58b1513b81f5e3a05947748fe9be74dd5aa80bc44fb"}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f602e0b046e0cab9a87e58b1513b81f5e3a05947748fe9be74dd5aa80bc44fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f602e0b046e0cab9a87e58b1513b81f5e3a05947748fe9be74dd5aa80bc44fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f602e0b046e0cab9a87e58b1513b81f5e3a05947748fe9be74dd5aa80bc44fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f602e0b046e0cab9a87e58b1513b81f5e3a05947748fe9be74dd5aa80bc44fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f602e0b046e0cab9a87e58b1513b81f5e3a05947748fe9be74dd5aa80bc44fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad4ae5481f5d8c532d0e26ed89c425c0db83f1a71e396e20b5b49a459d21eb69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f602e0b046e0cab9a87e58b1513b81f5e3a05947748fe9be74dd5aa80bc44fb"}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad4ae5481f5d8c532d0e26ed89c425c0db83f1a71e396e20b5b49a459d21eb69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f602e0b046e0cab9a87e58b1513b81f5e3a05947748fe9be74dd5aa80bc44fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f602e0b046e0cab9a87e58b1513b81f5e3a05947748fe9be74dd5aa80bc44fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f602e0b046e0cab9a87e58b1513b81f5e3a05947748fe9be74dd5aa80bc44fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad4ae5481f5d8c532d0e26ed89c425c0db83f1a71e396e20b5b49a459d21eb69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad4ae5481f5d8c532d0e26ed89c425c0db83f1a71e396e20b5b49a459d21eb69"}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad4ae5481f5d8c532d0e26ed89c425c0db83f1a71e396e20b5b49a459d21eb69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f602e0b046e0cab9a87e58b1513b81f5e3a05947748fe9be74dd5aa80bc44fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f602e0b046e0cab9a87e58b1513b81f5e3a05947748fe9be74dd5aa80bc44fb"}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f602e0b046e0cab9a87e58b1513b81f5e3a05947748fe9be74dd5aa80bc44fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad4ae5481f5d8c532d0e26ed89c425c0db83f1a71e396e20b5b49a459d21eb69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f602e0b046e0cab9a87e58b1513b81f5e3a05947748fe9be74dd5aa80bc44fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f602e0b046e0cab9a87e58b1513b81f5e3a05947748fe9be74dd5aa80bc44fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f602e0b046e0cab9a87e58b1513b81f5e3a05947748fe9be74dd5aa80bc44fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f602e0b046e0cab9a87e58b1513b81f5e3a05947748fe9be74dd5aa80bc44fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f602e0b046e0cab9a87e58b1513b81f5e3a05947748fe9be74dd5aa80bc44fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad4ae5481f5d8c532d0e26ed89c425c0db83f1a71e396e20b5b49a459d21eb69"}
{"level":"error","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5f602e0b046e0cab9a87e58b1513b81f5e3a05947748fe9be74dd5aa80bc44fb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5f602e0b046e0cab9a87e58b1513b81f5e3a05947748fe9be74dd5aa80bc44fb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad4ae5481f5d8c532d0e26ed89c425c0db83f1a71e396e20b5b49a459d21eb69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad4ae5481f5d8c532d0e26ed89c425c0db83f1a71e396e20b5b49a459d21eb69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad4ae5481f5d8c532d0e26ed89c425c0db83f1a71e396e20b5b49a459d21eb69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f602e0b046e0cab9a87e58b1513b81f5e3a05947748fe9be74dd5aa80bc44fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f602e0b046e0cab9a87e58b1513b81f5e3a05947748fe9be74dd5aa80bc44fb"}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f602e0b046e0cab9a87e58b1513b81f5e3a05947748fe9be74dd5aa80bc44fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad4ae5481f5d8c532d0e26ed89c425c0db83f1a71e396e20b5b49a459d21eb69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad4ae5481f5d8c532d0e26ed89c425c0db83f1a71e396e20b5b49a459d21eb69"}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad4ae5481f5d8c532d0e26ed89c425c0db83f1a71e396e20b5b49a459d21eb69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f602e0b046e0cab9a87e58b1513b81f5e3a05947748fe9be74dd5aa80bc44fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad4ae5481f5d8c532d0e26ed89c425c0db83f1a71e396e20b5b49a459d21eb69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad4ae5481f5d8c532d0e26ed89c425c0db83f1a71e396e20b5b49a459d21eb69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad4ae5481f5d8c532d0e26ed89c425c0db83f1a71e396e20b5b49a459d21eb69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad4ae5481f5d8c532d0e26ed89c425c0db83f1a71e396e20b5b49a459d21eb69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad4ae5481f5d8c532d0e26ed89c425c0db83f1a71e396e20b5b49a459d21eb69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f602e0b046e0cab9a87e58b1513b81f5e3a05947748fe9be74dd5aa80bc44fb"}
{"level":"error","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ad4ae5481f5d8c532d0e26ed89c425c0db83f1a71e396e20b5b49a459d21eb69","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ad4ae5481f5d8c532d0e26ed89c425c0db83f1a71e396e20b5b49a459d21eb69\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f602e0b046e0cab9a87e58b1513b81f5e3a05947748fe9be74dd5aa80bc44fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f602e0b046e0cab9a87e58b1513b81f5e3a05947748fe9be74dd5aa80bc44fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f602e0b046e0cab9a87e58b1513b81f5e3a05947748fe9be74dd5aa80bc44fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad4ae5481f5d8c532d0e26ed89c425c0db83f1a71e396e20b5b49a459d21eb69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad4ae5481f5d8c532d0e26ed89c425c0db83f1a71e396e20b5b49a459d21eb69"}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad4ae5481f5d8c532d0e26ed89c425c0db83f1a71e396e20b5b49a459d21eb69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f602e0b046e0cab9a87e58b1513b81f5e3a05947748fe9be74dd5aa80bc44fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f602e0b046e0cab9a87e58b1513b81f5e3a05947748fe9be74dd5aa80bc44fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad4ae5481f5d8c532d0e26ed89c425c0db83f1a71e396e20b5b49a459d21eb69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad4ae5481f5d8c532d0e26ed89c425c0db83f1a71e396e20b5b49a459d21eb69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f602e0b046e0cab9a87e58b1513b81f5e3a05947748fe9be74dd5aa80bc44fb"}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad4ae5481f5d8c532d0e26ed89c425c0db83f1a71e396e20b5b49a459d21eb69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f602e0b046e0cab9a87e58b1513b81f5e3a05947748fe9be74dd5aa80bc44fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f602e0b046e0cab9a87e58b1513b81f5e3a05947748fe9be74dd5aa80bc44fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f602e0b046e0cab9a87e58b1513b81f5e3a05947748fe9be74dd5aa80bc44fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cfdb6139111ddd1879f8bbcbae2ef1d3d6eddc10a6249ecd62800d825d78978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad4ae5481f5d8c532d0e26ed89c425c0db83f1a71e396e20b5b49a459d21eb69"}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cfdb6139111ddd1879f8bbcbae2ef1d3d6eddc10a6249ecd62800d825d78978","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad4ae5481f5d8c532d0e26ed89c425c0db83f1a71e396e20b5b49a459d21eb69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f602e0b046e0cab9a87e58b1513b81f5e3a05947748fe9be74dd5aa80bc44fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cfdb6139111ddd1879f8bbcbae2ef1d3d6eddc10a6249ecd62800d825d78978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cfdb6139111ddd1879f8bbcbae2ef1d3d6eddc10a6249ecd62800d825d78978","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cfdb6139111ddd1879f8bbcbae2ef1d3d6eddc10a6249ecd62800d825d78978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0cfdb6139111ddd1879f8bbcbae2ef1d3d6eddc10a6249ecd62800d825d78978","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0cfdb6139111ddd1879f8bbcbae2ef1d3d6eddc10a6249ecd62800d825d78978\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cfdb6139111ddd1879f8bbcbae2ef1d3d6eddc10a6249ecd62800d825d78978","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cfdb6139111ddd1879f8bbcbae2ef1d3d6eddc10a6249ecd62800d825d78978"}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cfdb6139111ddd1879f8bbcbae2ef1d3d6eddc10a6249ecd62800d825d78978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0cfdb6139111ddd1879f8bbcbae2ef1d3d6eddc10a6249ecd62800d825d78978"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cfdb6139111ddd1879f8bbcbae2ef1d3d6eddc10a6249ecd62800d825d78978","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cfdb6139111ddd1879f8bbcbae2ef1d3d6eddc10a6249ecd62800d825d78978","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f602e0b046e0cab9a87e58b1513b81f5e3a05947748fe9be74dd5aa80bc44fb"}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad4ae5481f5d8c532d0e26ed89c425c0db83f1a71e396e20b5b49a459d21eb69"}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cfdb6139111ddd1879f8bbcbae2ef1d3d6eddc10a6249ecd62800d825d78978"}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9"}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9"}
{"level":"debug","ts":"2026-07-10T02:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9"}
{"level":"debug","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9"}
{"level":"debug","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2f93177a542fa50513c2585b32a77cb1e43f85793b70905ad83f177bff05ec0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2f93177a542fa50513c2585b32a77cb1e43f85793b70905ad83f177bff05ec0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9"}
{"level":"debug","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2f93177a542fa50513c2585b32a77cb1e43f85793b70905ad83f177bff05ec0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2f93177a542fa50513c2585b32a77cb1e43f85793b70905ad83f177bff05ec0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2f93177a542fa50513c2585b32a77cb1e43f85793b70905ad83f177bff05ec0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2f93177a542fa50513c2585b32a77cb1e43f85793b70905ad83f177bff05ec0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2f93177a542fa50513c2585b32a77cb1e43f85793b70905ad83f177bff05ec0"}
{"level":"debug","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2f93177a542fa50513c2585b32a77cb1e43f85793b70905ad83f177bff05ec0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2f93177a542fa50513c2585b32a77cb1e43f85793b70905ad83f177bff05ec0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2f93177a542fa50513c2585b32a77cb1e43f85793b70905ad83f177bff05ec0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2f93177a542fa50513c2585b32a77cb1e43f85793b70905ad83f177bff05ec0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9"}
{"level":"debug","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2f93177a542fa50513c2585b32a77cb1e43f85793b70905ad83f177bff05ec0"}
{"level":"info","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9"}
{"level":"info","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9"}
{"level":"debug","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9"}
{"level":"debug","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9"}
{"level":"debug","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9"}
{"level":"debug","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9"}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"314c593ff3b3f31033403872c46a3c0e8781e3f5889601a316f26ddad6c4010d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"314c593ff3b3f31033403872c46a3c0e8781e3f5889601a316f26ddad6c4010d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"314c593ff3b3f31033403872c46a3c0e8781e3f5889601a316f26ddad6c4010d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"314c593ff3b3f31033403872c46a3c0e8781e3f5889601a316f26ddad6c4010d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/314c593ff3b3f31033403872c46a3c0e8781e3f5889601a316f26ddad6c4010d"}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"314c593ff3b3f31033403872c46a3c0e8781e3f5889601a316f26ddad6c4010d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/314c593ff3b3f31033403872c46a3c0e8781e3f5889601a316f26ddad6c4010d"}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"314c593ff3b3f31033403872c46a3c0e8781e3f5889601a316f26ddad6c4010d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:53:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:53:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["314c593ff3b3f31033403872c46a3c0e8781e3f5889601a316f26ddad6c4010d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"314c593ff3b3f31033403872c46a3c0e8781e3f5889601a316f26ddad6c4010d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"314c593ff3b3f31033403872c46a3c0e8781e3f5889601a316f26ddad6c4010d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"314c593ff3b3f31033403872c46a3c0e8781e3f5889601a316f26ddad6c4010d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"314c593ff3b3f31033403872c46a3c0e8781e3f5889601a316f26ddad6c4010d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"314c593ff3b3f31033403872c46a3c0e8781e3f5889601a316f26ddad6c4010d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/314c593ff3b3f31033403872c46a3c0e8781e3f5889601a316f26ddad6c4010d"}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"314c593ff3b3f31033403872c46a3c0e8781e3f5889601a316f26ddad6c4010d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/314c593ff3b3f31033403872c46a3c0e8781e3f5889601a316f26ddad6c4010d"}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"314c593ff3b3f31033403872c46a3c0e8781e3f5889601a316f26ddad6c4010d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:53:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:53:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["314c593ff3b3f31033403872c46a3c0e8781e3f5889601a316f26ddad6c4010d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"314c593ff3b3f31033403872c46a3c0e8781e3f5889601a316f26ddad6c4010d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"314c593ff3b3f31033403872c46a3c0e8781e3f5889601a316f26ddad6c4010d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"314c593ff3b3f31033403872c46a3c0e8781e3f5889601a316f26ddad6c4010d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"314c593ff3b3f31033403872c46a3c0e8781e3f5889601a316f26ddad6c4010d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"314c593ff3b3f31033403872c46a3c0e8781e3f5889601a316f26ddad6c4010d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/314c593ff3b3f31033403872c46a3c0e8781e3f5889601a316f26ddad6c4010d"}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"314c593ff3b3f31033403872c46a3c0e8781e3f5889601a316f26ddad6c4010d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/314c593ff3b3f31033403872c46a3c0e8781e3f5889601a316f26ddad6c4010d"}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"314c593ff3b3f31033403872c46a3c0e8781e3f5889601a316f26ddad6c4010d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:53:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:53:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["314c593ff3b3f31033403872c46a3c0e8781e3f5889601a316f26ddad6c4010d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"314c593ff3b3f31033403872c46a3c0e8781e3f5889601a316f26ddad6c4010d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58a2413b867e77427c749074bfabe589ac9e595c3a24ea14bea7f1ba461fd4c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58a2413b867e77427c749074bfabe589ac9e595c3a24ea14bea7f1ba461fd4c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"314c593ff3b3f31033403872c46a3c0e8781e3f5889601a316f26ddad6c4010d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"261ee37c137fb233f54817b30ceefc42e173c07addb535ca1e5e3579c56af901","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58a2413b867e77427c749074bfabe589ac9e595c3a24ea14bea7f1ba461fd4c4"}
{"level":"info","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"261ee37c137fb233f54817b30ceefc42e173c07addb535ca1e5e3579c56af901","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58a2413b867e77427c749074bfabe589ac9e595c3a24ea14bea7f1ba461fd4c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:53:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:53:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58a2413b867e77427c749074bfabe589ac9e595c3a24ea14bea7f1ba461fd4c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58a2413b867e77427c749074bfabe589ac9e595c3a24ea14bea7f1ba461fd4c4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/314c593ff3b3f31033403872c46a3c0e8781e3f5889601a316f26ddad6c4010d"}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"261ee37c137fb233f54817b30ceefc42e173c07addb535ca1e5e3579c56af901","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"261ee37c137fb233f54817b30ceefc42e173c07addb535ca1e5e3579c56af901","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58a2413b867e77427c749074bfabe589ac9e595c3a24ea14bea7f1ba461fd4c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"261ee37c137fb233f54817b30ceefc42e173c07addb535ca1e5e3579c56af901","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/261ee37c137fb233f54817b30ceefc42e173c07addb535ca1e5e3579c56af901"}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"261ee37c137fb233f54817b30ceefc42e173c07addb535ca1e5e3579c56af901","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:53:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:53:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["261ee37c137fb233f54817b30ceefc42e173c07addb535ca1e5e3579c56af901"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"261ee37c137fb233f54817b30ceefc42e173c07addb535ca1e5e3579c56af901","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"261ee37c137fb233f54817b30ceefc42e173c07addb535ca1e5e3579c56af901","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58a2413b867e77427c749074bfabe589ac9e595c3a24ea14bea7f1ba461fd4c4"}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2810ae44250b196f9aace851e346a275121d4b53742cb1cf5742fc837e26ca4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/261ee37c137fb233f54817b30ceefc42e173c07addb535ca1e5e3579c56af901"}
{"level":"info","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2810ae44250b196f9aace851e346a275121d4b53742cb1cf5742fc837e26ca4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2810ae44250b196f9aace851e346a275121d4b53742cb1cf5742fc837e26ca4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2810ae44250b196f9aace851e346a275121d4b53742cb1cf5742fc837e26ca4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2810ae44250b196f9aace851e346a275121d4b53742cb1cf5742fc837e26ca4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2810ae44250b196f9aace851e346a275121d4b53742cb1cf5742fc837e26ca4"}
{"level":"error","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c2810ae44250b196f9aace851e346a275121d4b53742cb1cf5742fc837e26ca4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c2810ae44250b196f9aace851e346a275121d4b53742cb1cf5742fc837e26ca4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2810ae44250b196f9aace851e346a275121d4b53742cb1cf5742fc837e26ca4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2810ae44250b196f9aace851e346a275121d4b53742cb1cf5742fc837e26ca4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2810ae44250b196f9aace851e346a275121d4b53742cb1cf5742fc837e26ca4"}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2810ae44250b196f9aace851e346a275121d4b53742cb1cf5742fc837e26ca4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:53:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:53:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2810ae44250b196f9aace851e346a275121d4b53742cb1cf5742fc837e26ca4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943"}
{"level":"info","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2810ae44250b196f9aace851e346a275121d4b53742cb1cf5742fc837e26ca4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2810ae44250b196f9aace851e346a275121d4b53742cb1cf5742fc837e26ca4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943"}
{"level":"info","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2810ae44250b196f9aace851e346a275121d4b53742cb1cf5742fc837e26ca4"}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:53:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:53:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e63a2eb0a286918a8b1c6df989497bf2290bfd416d3f27e81216aaeee2fe0d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e63a2eb0a286918a8b1c6df989497bf2290bfd416d3f27e81216aaeee2fe0d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e63a2eb0a286918a8b1c6df989497bf2290bfd416d3f27e81216aaeee2fe0d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e63a2eb0a286918a8b1c6df989497bf2290bfd416d3f27e81216aaeee2fe0d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e63a2eb0a286918a8b1c6df989497bf2290bfd416d3f27e81216aaeee2fe0d0"}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e63a2eb0a286918a8b1c6df989497bf2290bfd416d3f27e81216aaeee2fe0d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:53:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:53:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e63a2eb0a286918a8b1c6df989497bf2290bfd416d3f27e81216aaeee2fe0d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943"}
{"level":"info","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e63a2eb0a286918a8b1c6df989497bf2290bfd416d3f27e81216aaeee2fe0d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e63a2eb0a286918a8b1c6df989497bf2290bfd416d3f27e81216aaeee2fe0d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e63a2eb0a286918a8b1c6df989497bf2290bfd416d3f27e81216aaeee2fe0d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e63a2eb0a286918a8b1c6df989497bf2290bfd416d3f27e81216aaeee2fe0d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e63a2eb0a286918a8b1c6df989497bf2290bfd416d3f27e81216aaeee2fe0d0"}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e63a2eb0a286918a8b1c6df989497bf2290bfd416d3f27e81216aaeee2fe0d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e63a2eb0a286918a8b1c6df989497bf2290bfd416d3f27e81216aaeee2fe0d0"}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e63a2eb0a286918a8b1c6df989497bf2290bfd416d3f27e81216aaeee2fe0d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:53:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:53:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e63a2eb0a286918a8b1c6df989497bf2290bfd416d3f27e81216aaeee2fe0d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e63a2eb0a286918a8b1c6df989497bf2290bfd416d3f27e81216aaeee2fe0d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e63a2eb0a286918a8b1c6df989497bf2290bfd416d3f27e81216aaeee2fe0d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e63a2eb0a286918a8b1c6df989497bf2290bfd416d3f27e81216aaeee2fe0d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e63a2eb0a286918a8b1c6df989497bf2290bfd416d3f27e81216aaeee2fe0d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e63a2eb0a286918a8b1c6df989497bf2290bfd416d3f27e81216aaeee2fe0d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e63a2eb0a286918a8b1c6df989497bf2290bfd416d3f27e81216aaeee2fe0d0"}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e63a2eb0a286918a8b1c6df989497bf2290bfd416d3f27e81216aaeee2fe0d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e63a2eb0a286918a8b1c6df989497bf2290bfd416d3f27e81216aaeee2fe0d0"}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e63a2eb0a286918a8b1c6df989497bf2290bfd416d3f27e81216aaeee2fe0d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:53:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:53:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e63a2eb0a286918a8b1c6df989497bf2290bfd416d3f27e81216aaeee2fe0d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e63a2eb0a286918a8b1c6df989497bf2290bfd416d3f27e81216aaeee2fe0d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e63a2eb0a286918a8b1c6df989497bf2290bfd416d3f27e81216aaeee2fe0d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e63a2eb0a286918a8b1c6df989497bf2290bfd416d3f27e81216aaeee2fe0d0"}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3793951fbd00cf412ca7090d429902be146fb77bc8d759d9b30abb54960c9fe4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3793951fbd00cf412ca7090d429902be146fb77bc8d759d9b30abb54960c9fe4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3793951fbd00cf412ca7090d429902be146fb77bc8d759d9b30abb54960c9fe4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3793951fbd00cf412ca7090d429902be146fb77bc8d759d9b30abb54960c9fe4"}
{"level":"info","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3793951fbd00cf412ca7090d429902be146fb77bc8d759d9b30abb54960c9fe4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3793951fbd00cf412ca7090d429902be146fb77bc8d759d9b30abb54960c9fe4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3793951fbd00cf412ca7090d429902be146fb77bc8d759d9b30abb54960c9fe4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3793951fbd00cf412ca7090d429902be146fb77bc8d759d9b30abb54960c9fe4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3793951fbd00cf412ca7090d429902be146fb77bc8d759d9b30abb54960c9fe4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3793951fbd00cf412ca7090d429902be146fb77bc8d759d9b30abb54960c9fe4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3793951fbd00cf412ca7090d429902be146fb77bc8d759d9b30abb54960c9fe4"}
{"level":"info","ts":"2026-07-10T02:53:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3793951fbd00cf412ca7090d429902be146fb77bc8d759d9b30abb54960c9fe4"}
{"level":"debug","ts":"2026-07-10T02:53:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3793951fbd00cf412ca7090d429902be146fb77bc8d759d9b30abb54960c9fe4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:53:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:53:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3793951fbd00cf412ca7090d429902be146fb77bc8d759d9b30abb54960c9fe4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3793951fbd00cf412ca7090d429902be146fb77bc8d759d9b30abb54960c9fe4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3793951fbd00cf412ca7090d429902be146fb77bc8d759d9b30abb54960c9fe4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3793951fbd00cf412ca7090d429902be146fb77bc8d759d9b30abb54960c9fe4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3793951fbd00cf412ca7090d429902be146fb77bc8d759d9b30abb54960c9fe4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3793951fbd00cf412ca7090d429902be146fb77bc8d759d9b30abb54960c9fe4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3793951fbd00cf412ca7090d429902be146fb77bc8d759d9b30abb54960c9fe4"}
{"level":"debug","ts":"2026-07-10T02:53:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3793951fbd00cf412ca7090d429902be146fb77bc8d759d9b30abb54960c9fe4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3793951fbd00cf412ca7090d429902be146fb77bc8d759d9b30abb54960c9fe4"}
{"level":"debug","ts":"2026-07-10T02:53:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3793951fbd00cf412ca7090d429902be146fb77bc8d759d9b30abb54960c9fe4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:53:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:53:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3793951fbd00cf412ca7090d429902be146fb77bc8d759d9b30abb54960c9fe4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3793951fbd00cf412ca7090d429902be146fb77bc8d759d9b30abb54960c9fe4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3793951fbd00cf412ca7090d429902be146fb77bc8d759d9b30abb54960c9fe4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3793951fbd00cf412ca7090d429902be146fb77bc8d759d9b30abb54960c9fe4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3793951fbd00cf412ca7090d429902be146fb77bc8d759d9b30abb54960c9fe4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3793951fbd00cf412ca7090d429902be146fb77bc8d759d9b30abb54960c9fe4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3793951fbd00cf412ca7090d429902be146fb77bc8d759d9b30abb54960c9fe4"}
{"level":"debug","ts":"2026-07-10T02:53:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3793951fbd00cf412ca7090d429902be146fb77bc8d759d9b30abb54960c9fe4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3793951fbd00cf412ca7090d429902be146fb77bc8d759d9b30abb54960c9fe4"}
{"level":"debug","ts":"2026-07-10T02:53:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e545cc65d6300a2a9ca9ff6feab787625697d0306e56c0cde90d987014512dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e545cc65d6300a2a9ca9ff6feab787625697d0306e56c0cde90d987014512dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e545cc65d6300a2a9ca9ff6feab787625697d0306e56c0cde90d987014512dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3793951fbd00cf412ca7090d429902be146fb77bc8d759d9b30abb54960c9fe4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:53:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:53:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3793951fbd00cf412ca7090d429902be146fb77bc8d759d9b30abb54960c9fe4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e545cc65d6300a2a9ca9ff6feab787625697d0306e56c0cde90d987014512dc"}
{"level":"info","ts":"2026-07-10T02:53:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3793951fbd00cf412ca7090d429902be146fb77bc8d759d9b30abb54960c9fe4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e545cc65d6300a2a9ca9ff6feab787625697d0306e56c0cde90d987014512dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3793951fbd00cf412ca7090d429902be146fb77bc8d759d9b30abb54960c9fe4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e545cc65d6300a2a9ca9ff6feab787625697d0306e56c0cde90d987014512dc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e545cc65d6300a2a9ca9ff6feab787625697d0306e56c0cde90d987014512dc"}
{"level":"debug","ts":"2026-07-10T02:53:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e545cc65d6300a2a9ca9ff6feab787625697d0306e56c0cde90d987014512dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:53:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:53:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e545cc65d6300a2a9ca9ff6feab787625697d0306e56c0cde90d987014512dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3793951fbd00cf412ca7090d429902be146fb77bc8d759d9b30abb54960c9fe4"}
{"level":"info","ts":"2026-07-10T02:53:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e545cc65d6300a2a9ca9ff6feab787625697d0306e56c0cde90d987014512dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e545cc65d6300a2a9ca9ff6feab787625697d0306e56c0cde90d987014512dc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e545cc65d6300a2a9ca9ff6feab787625697d0306e56c0cde90d987014512dc"}
{"level":"debug","ts":"2026-07-10T02:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e"}
{"level":"debug","ts":"2026-07-10T02:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e"}
{"level":"debug","ts":"2026-07-10T02:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:53:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:53:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e"}
{"level":"debug","ts":"2026-07-10T02:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e"}
{"level":"debug","ts":"2026-07-10T02:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:53:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:53:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"621fe045a7953de468b49b960edeb17ca015e260751e5af80bc07b506b04bc46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e"}
{"level":"debug","ts":"2026-07-10T02:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:53:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:53:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/621fe045a7953de468b49b960edeb17ca015e260751e5af80bc07b506b04bc46"}
{"level":"info","ts":"2026-07-10T02:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e"}
{"level":"info","ts":"2026-07-10T02:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e"}
{"level":"debug","ts":"2026-07-10T02:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e"}
{"level":"debug","ts":"2026-07-10T02:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:53:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:53:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e"}
{"level":"debug","ts":"2026-07-10T02:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e"}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e"}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e"}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e"}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e"}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c"}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c"}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e"}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c"}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c"}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c"}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c"}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c"}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18"}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18"}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cb90f8d2e82a6fc77528c5a52afed9d64b11e46b2a9a265d52a24e47119fdfa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18"}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cb90f8d2e82a6fc77528c5a52afed9d64b11e46b2a9a265d52a24e47119fdfa"}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18"}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18"}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18"}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18"}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18"}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18"}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6af47e9fafd401a33f51d18eb1020d6188508703bd1af990e7fe908a257745fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6af47e9fafd401a33f51d18eb1020d6188508703bd1af990e7fe908a257745fd"}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6af47e9fafd401a33f51d18eb1020d6188508703bd1af990e7fe908a257745fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6af47e9fafd401a33f51d18eb1020d6188508703bd1af990e7fe908a257745fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6af47e9fafd401a33f51d18eb1020d6188508703bd1af990e7fe908a257745fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18"}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6af47e9fafd401a33f51d18eb1020d6188508703bd1af990e7fe908a257745fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6af47e9fafd401a33f51d18eb1020d6188508703bd1af990e7fe908a257745fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6af47e9fafd401a33f51d18eb1020d6188508703bd1af990e7fe908a257745fd"}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6af47e9fafd401a33f51d18eb1020d6188508703bd1af990e7fe908a257745fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18"}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"261ee37c137fb233f54817b30ceefc42e173c07addb535ca1e5e3579c56af901","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6af47e9fafd401a33f51d18eb1020d6188508703bd1af990e7fe908a257745fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6af47e9fafd401a33f51d18eb1020d6188508703bd1af990e7fe908a257745fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6af47e9fafd401a33f51d18eb1020d6188508703bd1af990e7fe908a257745fd"}
{"level":"error","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6af47e9fafd401a33f51d18eb1020d6188508703bd1af990e7fe908a257745fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:53:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6af47e9fafd401a33f51d18eb1020d6188508703bd1af990e7fe908a257745fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/261ee37c137fb233f54817b30ceefc42e173c07addb535ca1e5e3579c56af901"}
{"level":"info","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6af47e9fafd401a33f51d18eb1020d6188508703bd1af990e7fe908a257745fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6af47e9fafd401a33f51d18eb1020d6188508703bd1af990e7fe908a257745fd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18"}
{"level":"info","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6af47e9fafd401a33f51d18eb1020d6188508703bd1af990e7fe908a257745fd"}
{"level":"debug","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"314c593ff3b3f31033403872c46a3c0e8781e3f5889601a316f26ddad6c4010d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"314c593ff3b3f31033403872c46a3c0e8781e3f5889601a316f26ddad6c4010d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"314c593ff3b3f31033403872c46a3c0e8781e3f5889601a316f26ddad6c4010d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3793951fbd00cf412ca7090d429902be146fb77bc8d759d9b30abb54960c9fe4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/314c593ff3b3f31033403872c46a3c0e8781e3f5889601a316f26ddad6c4010d"}
{"level":"debug","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"314c593ff3b3f31033403872c46a3c0e8781e3f5889601a316f26ddad6c4010d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:53:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:53:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["314c593ff3b3f31033403872c46a3c0e8781e3f5889601a316f26ddad6c4010d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"314c593ff3b3f31033403872c46a3c0e8781e3f5889601a316f26ddad6c4010d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"314c593ff3b3f31033403872c46a3c0e8781e3f5889601a316f26ddad6c4010d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3793951fbd00cf412ca7090d429902be146fb77bc8d759d9b30abb54960c9fe4"}
{"level":"info","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/314c593ff3b3f31033403872c46a3c0e8781e3f5889601a316f26ddad6c4010d"}
{"level":"debug","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28b2f0654b968a4dcfd05bc712bab908defd9fa17263304883653474c9a65e88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2810ae44250b196f9aace851e346a275121d4b53742cb1cf5742fc837e26ca4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28b2f0654b968a4dcfd05bc712bab908defd9fa17263304883653474c9a65e88"}
{"level":"debug","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2f93177a542fa50513c2585b32a77cb1e43f85793b70905ad83f177bff05ec0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2810ae44250b196f9aace851e346a275121d4b53742cb1cf5742fc837e26ca4"}
{"level":"debug","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e545cc65d6300a2a9ca9ff6feab787625697d0306e56c0cde90d987014512dc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2f93177a542fa50513c2585b32a77cb1e43f85793b70905ad83f177bff05ec0"}
{"level":"info","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e545cc65d6300a2a9ca9ff6feab787625697d0306e56c0cde90d987014512dc"}
{"level":"debug","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5215c432136f6eeca3d220d37c4516a722064714a483b5dea5fed02122522c68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e63a2eb0a286918a8b1c6df989497bf2290bfd416d3f27e81216aaeee2fe0d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5215c432136f6eeca3d220d37c4516a722064714a483b5dea5fed02122522c68"}
{"level":"debug","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f602e0b046e0cab9a87e58b1513b81f5e3a05947748fe9be74dd5aa80bc44fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e63a2eb0a286918a8b1c6df989497bf2290bfd416d3f27e81216aaeee2fe0d0"}
{"level":"info","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f602e0b046e0cab9a87e58b1513b81f5e3a05947748fe9be74dd5aa80bc44fb"}
{"level":"debug","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13031bb16d04f6ebbf3399e33ab04943fa34a8f6cb55f41c48ec741b32d37691","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943"}
{"level":"debug","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58a2413b867e77427c749074bfabe589ac9e595c3a24ea14bea7f1ba461fd4c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:53:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:53:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13031bb16d04f6ebbf3399e33ab04943fa34a8f6cb55f41c48ec741b32d37691"}
{"level":"info","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943"}
{"level":"info","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:53:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:53:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:53:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:53:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58a2413b867e77427c749074bfabe589ac9e595c3a24ea14bea7f1ba461fd4c4"}
{"level":"error","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b0414b83283b9dac3a6c6ecb0ee13025e9c7f368f0503f8e009e14c2555a374","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943"}
{"level":"error","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:53:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:53:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"707f119cecb60316a9e2712014924194bd19c0409d7d9d67cbba125818f9e572","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:53:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:53:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b0414b83283b9dac3a6c6ecb0ee13025e9c7f368f0503f8e009e14c2555a374"}
{"level":"error","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cfdb6139111ddd1879f8bbcbae2ef1d3d6eddc10a6249ecd62800d825d78978","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943"}
{"level":"error","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:53:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:53:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:53:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:53:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/707f119cecb60316a9e2712014924194bd19c0409d7d9d67cbba125818f9e572"}
{"level":"error","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad4ae5481f5d8c532d0e26ed89c425c0db83f1a71e396e20b5b49a459d21eb69","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cfdb6139111ddd1879f8bbcbae2ef1d3d6eddc10a6249ecd62800d825d78978"}
{"level":"info","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9"}
{"level":"info","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943"}
{"level":"info","ts":"2026-07-10T02:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad4ae5481f5d8c532d0e26ed89c425c0db83f1a71e396e20b5b49a459d21eb69"}
{"level":"info","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9adf6c32-a26c-4322-a9bf-ce5d2d90d0d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:41796","PortSpecifier":{"PortValue":41796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9adf6c32-a26c-4322-a9bf-ce5d2d90d0d4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9adf6c32-a26c-4322-a9bf-ce5d2d90d0d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:41796","PortSpecifier":{"PortValue":41796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783652017,"nanos":763139307},"http":{"id":"9adf6c32-a26c-4322-a9bf-ce5d2d90d0d4","method":"POST","headers":{":authority":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9adf6c32-a26c-4322-a9bf-ce5d2d90d0d4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9adf6c32-a26c-4322-a9bf-ce5d2d90d0d4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f57a24c5-3349-4201-bb76-57629a222ea1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ecdb5a27-a9da-408c-8428-a399f0e5aa0e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9f5c3fb617ad"]}}
{"level":"debug","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9adf6c32-a26c-4322-a9bf-ce5d2d90d0d4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9f5c3fb617ad"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ecdb5a27-a9da-408c-8428-a399f0e5aa0e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f57a24c5-3349-4201-bb76-57629a222ea1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7b0414b83283b9dac3a6c6ecb0ee13025e9c7f368f0503f8e009e14c2555a374"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9adf6c32-a26c-4322-a9bf-ce5d2d90d0d4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9adf6c32-a26c-4322-a9bf-ce5d2d90d0d4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9adf6c32-a26c-4322-a9bf-ce5d2d90d0d4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b98a/sub-test-model-d5b98a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9adf6c32-a26c-4322-a9bf-ce5d2d90d0d4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9adf6c32-a26c-4322-a9bf-ce5d2d90d0d4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9adf6c32-a26c-4322-a9bf-ce5d2d90d0d4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9adf6c32-a26c-4322-a9bf-ce5d2d90d0d4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9adf6c32-a26c-4322-a9bf-ce5d2d90d0d4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d7229644-6943-4eaa-9045-a3f042235750","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:50984","PortSpecifier":{"PortValue":50984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d7229644-6943-4eaa-9045-a3f042235750","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-de8279.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d7229644-6943-4eaa-9045-a3f042235750","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:50984","PortSpecifier":{"PortValue":50984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783652017,"nanos":806457828},"http":{"id":"d7229644-6943-4eaa-9045-a3f042235750","method":"POST","headers":{":authority":"e2e-shared-b-de8279.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d7229644-6943-4eaa-9045-a3f042235750","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d7229644-6943-4eaa-9045-a3f042235750","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f57a24c5-3349-4201-bb76-57629a222ea1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ecdb5a27-a9da-408c-8428-a399f0e5aa0e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9f5c3fb617ad"]}}
{"level":"debug","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d7229644-6943-4eaa-9045-a3f042235750","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9f5c3fb617ad"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ecdb5a27-a9da-408c-8428-a399f0e5aa0e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f57a24c5-3349-4201-bb76-57629a222ea1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"621fe045a7953de468b49b960edeb17ca015e260751e5af80bc07b506b04bc46"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-de8279.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7229644-6943-4eaa-9045-a3f042235750","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7229644-6943-4eaa-9045-a3f042235750","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7229644-6943-4eaa-9045-a3f042235750","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-de8279/sub-test-model-de8279\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d7229644-6943-4eaa-9045-a3f042235750","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7229644-6943-4eaa-9045-a3f042235750","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7229644-6943-4eaa-9045-a3f042235750","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d7229644-6943-4eaa-9045-a3f042235750","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d7229644-6943-4eaa-9045-a3f042235750","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"592c8d6b-cd3a-4be4-bb25-eabc1363e4af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:41802","PortSpecifier":{"PortValue":41802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"592c8d6b-cd3a-4be4-bb25-eabc1363e4af","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"592c8d6b-cd3a-4be4-bb25-eabc1363e4af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:41802","PortSpecifier":{"PortValue":41802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783652017,"nanos":844468639},"http":{"id":"592c8d6b-cd3a-4be4-bb25-eabc1363e4af","method":"GET","headers":{":authority":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"592c8d6b-cd3a-4be4-bb25-eabc1363e4af","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5r1KkugI5L5uTt9w_7OXJXeqaRmrWoayECXth2CHtEtTAjxvFNpR0XNgSd2r"}
{"level":"debug","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"592c8d6b-cd3a-4be4-bb25-eabc1363e4af","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-5r1KkugI5L5uTt9w_7OXJXeqaRmrWoayECXth2CHtEtTAjxvFNpR0XNgSd2r\"}"}
{"level":"debug","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"592c8d6b-cd3a-4be4-bb25-eabc1363e4af","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b2104969-d146-4f7e-929a-44be78e90bc6","keyName":"e2e-sub-iso-8a12ea","subscription":"e2e-a-only-9660b6","tenant":"e2e-shared-a-d5b98a","userId":"b2104969-d146-4f7e-929a-44be78e90bc6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"592c8d6b-cd3a-4be4-bb25-eabc1363e4af","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"592c8d6b-cd3a-4be4-bb25-eabc1363e4af","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"592c8d6b-cd3a-4be4-bb25-eabc1363e4af","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"592c8d6b-cd3a-4be4-bb25-eabc1363e4af","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b98a/sub-test-model-d5b98a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"592c8d6b-cd3a-4be4-bb25-eabc1363e4af","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"592c8d6b-cd3a-4be4-bb25-eabc1363e4af","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"592c8d6b-cd3a-4be4-bb25-eabc1363e4af","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"592c8d6b-cd3a-4be4-bb25-eabc1363e4af","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-9660b6"}
{"level":"info","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"592c8d6b-cd3a-4be4-bb25-eabc1363e4af","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"592c8d6b-cd3a-4be4-bb25-eabc1363e4af","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24b44689-5ac4-445e-95ad-81d3b0382117","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:50986","PortSpecifier":{"PortValue":50986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"24b44689-5ac4-445e-95ad-81d3b0382117","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-de8279.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24b44689-5ac4-445e-95ad-81d3b0382117","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:50986","PortSpecifier":{"PortValue":50986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783652017,"nanos":888893729},"http":{"id":"24b44689-5ac4-445e-95ad-81d3b0382117","method":"GET","headers":{":authority":"e2e-shared-b-de8279.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"24b44689-5ac4-445e-95ad-81d3b0382117","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-18U99JbTzC4q72UCc_K0rtaiEg4oh1KNp45zCNLNHjWz6tUu4nyDWpsr4dPMQ"}
{"level":"debug","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"24b44689-5ac4-445e-95ad-81d3b0382117","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-de8279.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-18U99JbTzC4q72UCc_K0rtaiEg4oh1KNp45zCNLNHjWz6tUu4nyDWpsr4dPMQ\"}"}
{"level":"debug","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"24b44689-5ac4-445e-95ad-81d3b0382117","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-de8279.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3b8f4a73-6e29-4bc0-8b37-9d7d5842613f","keyName":"e2e-sub-iso-3d0a23","subscription":"e2e-b-only-9660b6","tenant":"e2e-shared-b-de8279","userId":"3b8f4a73-6e29-4bc0-8b37-9d7d5842613f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"24b44689-5ac4-445e-95ad-81d3b0382117","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24b44689-5ac4-445e-95ad-81d3b0382117","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24b44689-5ac4-445e-95ad-81d3b0382117","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24b44689-5ac4-445e-95ad-81d3b0382117","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-de8279/sub-test-model-de8279\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"24b44689-5ac4-445e-95ad-81d3b0382117","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24b44689-5ac4-445e-95ad-81d3b0382117","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24b44689-5ac4-445e-95ad-81d3b0382117","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24b44689-5ac4-445e-95ad-81d3b0382117","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-9660b6"}
{"level":"info","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24b44689-5ac4-445e-95ad-81d3b0382117","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:53:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24b44689-5ac4-445e-95ad-81d3b0382117","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1e2f661-2bf9-4839-a007-55695bf98fa9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:45942","PortSpecifier":{"PortValue":45942}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f1e2f661-2bf9-4839-a007-55695bf98fa9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1e2f661-2bf9-4839-a007-55695bf98fa9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:45942","PortSpecifier":{"PortValue":45942}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783652036,"nanos":675552635},"http":{"id":"f1e2f661-2bf9-4839-a007-55695bf98fa9","method":"POST","headers":{":authority":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f1e2f661-2bf9-4839-a007-55695bf98fa9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f1e2f661-2bf9-4839-a007-55695bf98fa9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f57a24c5-3349-4201-bb76-57629a222ea1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ecdb5a27-a9da-408c-8428-a399f0e5aa0e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9f5c3fb617ad"]}}
{"level":"debug","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f1e2f661-2bf9-4839-a007-55695bf98fa9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9f5c3fb617ad"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ecdb5a27-a9da-408c-8428-a399f0e5aa0e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f57a24c5-3349-4201-bb76-57629a222ea1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7b0414b83283b9dac3a6c6ecb0ee13025e9c7f368f0503f8e009e14c2555a374"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1e2f661-2bf9-4839-a007-55695bf98fa9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1e2f661-2bf9-4839-a007-55695bf98fa9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1e2f661-2bf9-4839-a007-55695bf98fa9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b98a/sub-test-model-d5b98a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f1e2f661-2bf9-4839-a007-55695bf98fa9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1e2f661-2bf9-4839-a007-55695bf98fa9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1e2f661-2bf9-4839-a007-55695bf98fa9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1e2f661-2bf9-4839-a007-55695bf98fa9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1e2f661-2bf9-4839-a007-55695bf98fa9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"45a929e9-67fe-4752-b5a8-709cdaa90ef3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49076","PortSpecifier":{"PortValue":49076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"45a929e9-67fe-4752-b5a8-709cdaa90ef3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-de8279.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"45a929e9-67fe-4752-b5a8-709cdaa90ef3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49076","PortSpecifier":{"PortValue":49076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783652036,"nanos":716752731},"http":{"id":"45a929e9-67fe-4752-b5a8-709cdaa90ef3","method":"POST","headers":{":authority":"e2e-shared-b-de8279.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"45a929e9-67fe-4752-b5a8-709cdaa90ef3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"45a929e9-67fe-4752-b5a8-709cdaa90ef3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f57a24c5-3349-4201-bb76-57629a222ea1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ecdb5a27-a9da-408c-8428-a399f0e5aa0e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9f5c3fb617ad"]}}
{"level":"debug","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"45a929e9-67fe-4752-b5a8-709cdaa90ef3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9f5c3fb617ad"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ecdb5a27-a9da-408c-8428-a399f0e5aa0e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f57a24c5-3349-4201-bb76-57629a222ea1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"621fe045a7953de468b49b960edeb17ca015e260751e5af80bc07b506b04bc46"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-de8279.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45a929e9-67fe-4752-b5a8-709cdaa90ef3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45a929e9-67fe-4752-b5a8-709cdaa90ef3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45a929e9-67fe-4752-b5a8-709cdaa90ef3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-de8279/sub-test-model-de8279\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"45a929e9-67fe-4752-b5a8-709cdaa90ef3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45a929e9-67fe-4752-b5a8-709cdaa90ef3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45a929e9-67fe-4752-b5a8-709cdaa90ef3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"45a929e9-67fe-4752-b5a8-709cdaa90ef3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"45a929e9-67fe-4752-b5a8-709cdaa90ef3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"917e1dce-c9ec-49d1-ae54-c98bb92e8c34","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:45952","PortSpecifier":{"PortValue":45952}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"917e1dce-c9ec-49d1-ae54-c98bb92e8c34","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"917e1dce-c9ec-49d1-ae54-c98bb92e8c34","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:45952","PortSpecifier":{"PortValue":45952}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783652036,"nanos":756000769},"http":{"id":"917e1dce-c9ec-49d1-ae54-c98bb92e8c34","method":"POST","headers":{":authority":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"917e1dce-c9ec-49d1-ae54-c98bb92e8c34","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Cg5dRFM5JBxwZwKf_kMFQnBhFyDcSfddxnFKo46RvEY7a7e549dNEYRqwBaq"}
{"level":"debug","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"917e1dce-c9ec-49d1-ae54-c98bb92e8c34","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Cg5dRFM5JBxwZwKf_kMFQnBhFyDcSfddxnFKo46RvEY7a7e549dNEYRqwBaq\"}"}
{"level":"debug","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"917e1dce-c9ec-49d1-ae54-c98bb92e8c34","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5e77c8fc-b893-483e-bb6c-94ae306203ab","keyName":"e2e-sub-iso-b667b6","subscription":"e2e-shared-sub-aaf966","tenant":"e2e-shared-a-d5b98a","userId":"5e77c8fc-b893-483e-bb6c-94ae306203ab","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"917e1dce-c9ec-49d1-ae54-c98bb92e8c34","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"917e1dce-c9ec-49d1-ae54-c98bb92e8c34","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"917e1dce-c9ec-49d1-ae54-c98bb92e8c34","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"917e1dce-c9ec-49d1-ae54-c98bb92e8c34","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b98a/sub-test-model-d5b98a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"917e1dce-c9ec-49d1-ae54-c98bb92e8c34","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"917e1dce-c9ec-49d1-ae54-c98bb92e8c34","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"917e1dce-c9ec-49d1-ae54-c98bb92e8c34","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"917e1dce-c9ec-49d1-ae54-c98bb92e8c34","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-aaf966"}
{"level":"info","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"917e1dce-c9ec-49d1-ae54-c98bb92e8c34","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"917e1dce-c9ec-49d1-ae54-c98bb92e8c34","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ac5fafe0-857e-47c6-bd35-dc628d42b8e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49086","PortSpecifier":{"PortValue":49086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ac5fafe0-857e-47c6-bd35-dc628d42b8e6","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-de8279.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ac5fafe0-857e-47c6-bd35-dc628d42b8e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49086","PortSpecifier":{"PortValue":49086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783652036,"nanos":785913654},"http":{"id":"ac5fafe0-857e-47c6-bd35-dc628d42b8e6","method":"POST","headers":{":authority":"e2e-shared-b-de8279.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ac5fafe0-857e-47c6-bd35-dc628d42b8e6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-16dHxVFf07TxTxEiV_QMMQOcS9iGq7emHuYa8DvQQNLVqmURVlwLhxMgvhL9T"}
{"level":"debug","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ac5fafe0-857e-47c6-bd35-dc628d42b8e6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-de8279.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-16dHxVFf07TxTxEiV_QMMQOcS9iGq7emHuYa8DvQQNLVqmURVlwLhxMgvhL9T\"}"}
{"level":"debug","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ac5fafe0-857e-47c6-bd35-dc628d42b8e6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-de8279.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e3165210-ea15-443c-b4ca-7c411cd4ab17","keyName":"e2e-sub-iso-4fb1ab","subscription":"e2e-shared-sub-aaf966","tenant":"e2e-shared-b-de8279","userId":"e3165210-ea15-443c-b4ca-7c411cd4ab17","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ac5fafe0-857e-47c6-bd35-dc628d42b8e6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ac5fafe0-857e-47c6-bd35-dc628d42b8e6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ac5fafe0-857e-47c6-bd35-dc628d42b8e6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ac5fafe0-857e-47c6-bd35-dc628d42b8e6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-de8279/sub-test-model-de8279\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ac5fafe0-857e-47c6-bd35-dc628d42b8e6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ac5fafe0-857e-47c6-bd35-dc628d42b8e6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ac5fafe0-857e-47c6-bd35-dc628d42b8e6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-aaf966"}
{"level":"debug","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ac5fafe0-857e-47c6-bd35-dc628d42b8e6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ac5fafe0-857e-47c6-bd35-dc628d42b8e6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:53:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ac5fafe0-857e-47c6-bd35-dc628d42b8e6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e545cc65d6300a2a9ca9ff6feab787625697d0306e56c0cde90d987014512dc"}
{"level":"info","ts":"2026-07-10T02:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d1f1ec51169a71fbde9f2f8ec398abe8ec8b093d36959f3c0a482037c8518943"}
{"level":"info","ts":"2026-07-10T02:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/314c593ff3b3f31033403872c46a3c0e8781e3f5889601a316f26ddad6c4010d"}
{"level":"info","ts":"2026-07-10T02:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3793951fbd00cf412ca7090d429902be146fb77bc8d759d9b30abb54960c9fe4"}
{"level":"info","ts":"2026-07-10T02:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/221883b06c847f57a58e5aa19b3a9356c10542d348daaf3501c8f3b90d09f94e"}
{"level":"info","ts":"2026-07-10T02:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2f93177a542fa50513c2585b32a77cb1e43f85793b70905ad83f177bff05ec0"}
{"level":"info","ts":"2026-07-10T02:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e63a2eb0a286918a8b1c6df989497bf2290bfd416d3f27e81216aaeee2fe0d0"}
{"level":"info","ts":"2026-07-10T02:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58a2413b867e77427c749074bfabe589ac9e595c3a24ea14bea7f1ba461fd4c4"}
{"level":"info","ts":"2026-07-10T02:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0cfdb6139111ddd1879f8bbcbae2ef1d3d6eddc10a6249ecd62800d825d78978"}
{"level":"info","ts":"2026-07-10T02:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c700049445ccd3fd87b4b5b9cc76e97814cfe290c9081fe165f15a90a4c63fe9"}
{"level":"info","ts":"2026-07-10T02:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f602e0b046e0cab9a87e58b1513b81f5e3a05947748fe9be74dd5aa80bc44fb"}
{"level":"info","ts":"2026-07-10T02:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/261ee37c137fb233f54817b30ceefc42e173c07addb535ca1e5e3579c56af901"}
{"level":"info","ts":"2026-07-10T02:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5215c432136f6eeca3d220d37c4516a722064714a483b5dea5fed02122522c68"}
{"level":"info","ts":"2026-07-10T02:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad4ae5481f5d8c532d0e26ed89c425c0db83f1a71e396e20b5b49a459d21eb69"}
{"level":"info","ts":"2026-07-10T02:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ae528b8cdfa3e08083aa2c041750f659dd97fdd625defa115f47f6bf9d4af18"}
{"level":"info","ts":"2026-07-10T02:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2810ae44250b196f9aace851e346a275121d4b53742cb1cf5742fc837e26ca4"}
{"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"367fb2dd41d44c1f8b8bba7560bd4a01103df781a8002c670be23938bc43f099","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"367fb2dd41d44c1f8b8bba7560bd4a01103df781a8002c670be23938bc43f099","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"367fb2dd41d44c1f8b8bba7560bd4a01103df781a8002c670be23938bc43f099","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"367fb2dd41d44c1f8b8bba7560bd4a01103df781a8002c670be23938bc43f099","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/367fb2dd41d44c1f8b8bba7560bd4a01103df781a8002c670be23938bc43f099"}
{"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"367fb2dd41d44c1f8b8bba7560bd4a01103df781a8002c670be23938bc43f099","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/367fb2dd41d44c1f8b8bba7560bd4a01103df781a8002c670be23938bc43f099"}
{"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"367fb2dd41d44c1f8b8bba7560bd4a01103df781a8002c670be23938bc43f099","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["367fb2dd41d44c1f8b8bba7560bd4a01103df781a8002c670be23938bc43f099"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"367fb2dd41d44c1f8b8bba7560bd4a01103df781a8002c670be23938bc43f099","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2911975eda36b6ef52d68765a70fc00ee031d3913c0641bae89338cf2fb2d859","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2911975eda36b6ef52d68765a70fc00ee031d3913c0641bae89338cf2fb2d859","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"367fb2dd41d44c1f8b8bba7560bd4a01103df781a8002c670be23938bc43f099","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2911975eda36b6ef52d68765a70fc00ee031d3913c0641bae89338cf2fb2d859","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2911975eda36b6ef52d68765a70fc00ee031d3913c0641bae89338cf2fb2d859"}
{"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2911975eda36b6ef52d68765a70fc00ee031d3913c0641bae89338cf2fb2d859","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2911975eda36b6ef52d68765a70fc00ee031d3913c0641bae89338cf2fb2d859"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2911975eda36b6ef52d68765a70fc00ee031d3913c0641bae89338cf2fb2d859","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2911975eda36b6ef52d68765a70fc00ee031d3913c0641bae89338cf2fb2d859","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/367fb2dd41d44c1f8b8bba7560bd4a01103df781a8002c670be23938bc43f099"}
{"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2911975eda36b6ef52d68765a70fc00ee031d3913c0641bae89338cf2fb2d859"}
{"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16042a4540bd3350fa746c839df0bd588e2fd961f1752bd6e1c3d8bbaafb2988","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16042a4540bd3350fa746c839df0bd588e2fd961f1752bd6e1c3d8bbaafb2988","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16042a4540bd3350fa746c839df0bd588e2fd961f1752bd6e1c3d8bbaafb2988","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16042a4540bd3350fa746c839df0bd588e2fd961f1752bd6e1c3d8bbaafb2988"}
{"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16042a4540bd3350fa746c839df0bd588e2fd961f1752bd6e1c3d8bbaafb2988","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16042a4540bd3350fa746c839df0bd588e2fd961f1752bd6e1c3d8bbaafb2988","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"16042a4540bd3350fa746c839df0bd588e2fd961f1752bd6e1c3d8bbaafb2988","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"16042a4540bd3350fa746c839df0bd588e2fd961f1752bd6e1c3d8bbaafb2988\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16042a4540bd3350fa746c839df0bd588e2fd961f1752bd6e1c3d8bbaafb2988","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16042a4540bd3350fa746c839df0bd588e2fd961f1752bd6e1c3d8bbaafb2988","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16042a4540bd3350fa746c839df0bd588e2fd961f1752bd6e1c3d8bbaafb2988"}
{"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16042a4540bd3350fa746c839df0bd588e2fd961f1752bd6e1c3d8bbaafb2988"}
{"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab8dcdf999e749e710c1e7a5a686ae4956ba4999a675814cdae1915e271bdcd1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab8dcdf999e749e710c1e7a5a686ae4956ba4999a675814cdae1915e271bdcd1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab8dcdf999e749e710c1e7a5a686ae4956ba4999a675814cdae1915e271bdcd1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab8dcdf999e749e710c1e7a5a686ae4956ba4999a675814cdae1915e271bdcd1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab8dcdf999e749e710c1e7a5a686ae4956ba4999a675814cdae1915e271bdcd1"}
{"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16042a4540bd3350fa746c839df0bd588e2fd961f1752bd6e1c3d8bbaafb2988","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16042a4540bd3350fa746c839df0bd588e2fd961f1752bd6e1c3d8bbaafb2988"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16042a4540bd3350fa746c839df0bd588e2fd961f1752bd6e1c3d8bbaafb2988","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16042a4540bd3350fa746c839df0bd588e2fd961f1752bd6e1c3d8bbaafb2988","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab8dcdf999e749e710c1e7a5a686ae4956ba4999a675814cdae1915e271bdcd1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab8dcdf999e749e710c1e7a5a686ae4956ba4999a675814cdae1915e271bdcd1"}
{"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16042a4540bd3350fa746c839df0bd588e2fd961f1752bd6e1c3d8bbaafb2988"}
{"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab8dcdf999e749e710c1e7a5a686ae4956ba4999a675814cdae1915e271bdcd1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab8dcdf999e749e710c1e7a5a686ae4956ba4999a675814cdae1915e271bdcd1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab8dcdf999e749e710c1e7a5a686ae4956ba4999a675814cdae1915e271bdcd1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab8dcdf999e749e710c1e7a5a686ae4956ba4999a675814cdae1915e271bdcd1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab8dcdf999e749e710c1e7a5a686ae4956ba4999a675814cdae1915e271bdcd1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab8dcdf999e749e710c1e7a5a686ae4956ba4999a675814cdae1915e271bdcd1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab8dcdf999e749e710c1e7a5a686ae4956ba4999a675814cdae1915e271bdcd1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab8dcdf999e749e710c1e7a5a686ae4956ba4999a675814cdae1915e271bdcd1"}
{"level":"debug","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab8dcdf999e749e710c1e7a5a686ae4956ba4999a675814cdae1915e271bdcd1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab8dcdf999e749e710c1e7a5a686ae4956ba4999a675814cdae1915e271bdcd1"}
{"level":"debug","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab8dcdf999e749e710c1e7a5a686ae4956ba4999a675814cdae1915e271bdcd1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab8dcdf999e749e710c1e7a5a686ae4956ba4999a675814cdae1915e271bdcd1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab8dcdf999e749e710c1e7a5a686ae4956ba4999a675814cdae1915e271bdcd1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab8dcdf999e749e710c1e7a5a686ae4956ba4999a675814cdae1915e271bdcd1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30ed6fc50b7e0098023cdbe69dd0ef71647761004aa123ddd5678349a7f7ff77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab8dcdf999e749e710c1e7a5a686ae4956ba4999a675814cdae1915e271bdcd1"}
{"level":"info","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30ed6fc50b7e0098023cdbe69dd0ef71647761004aa123ddd5678349a7f7ff77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30ed6fc50b7e0098023cdbe69dd0ef71647761004aa123ddd5678349a7f7ff77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30ed6fc50b7e0098023cdbe69dd0ef71647761004aa123ddd5678349a7f7ff77"}
{"level":"info","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30ed6fc50b7e0098023cdbe69dd0ef71647761004aa123ddd5678349a7f7ff77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30ed6fc50b7e0098023cdbe69dd0ef71647761004aa123ddd5678349a7f7ff77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"30ed6fc50b7e0098023cdbe69dd0ef71647761004aa123ddd5678349a7f7ff77","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"30ed6fc50b7e0098023cdbe69dd0ef71647761004aa123ddd5678349a7f7ff77\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30ed6fc50b7e0098023cdbe69dd0ef71647761004aa123ddd5678349a7f7ff77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30ed6fc50b7e0098023cdbe69dd0ef71647761004aa123ddd5678349a7f7ff77","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30ed6fc50b7e0098023cdbe69dd0ef71647761004aa123ddd5678349a7f7ff77"}
{"level":"info","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30ed6fc50b7e0098023cdbe69dd0ef71647761004aa123ddd5678349a7f7ff77"}
{"level":"debug","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8653136b2ad2ac8d360ad6edca9a3bd813229678d8d4c0c2ba689c61b83c786e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8653136b2ad2ac8d360ad6edca9a3bd813229678d8d4c0c2ba689c61b83c786e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8653136b2ad2ac8d360ad6edca9a3bd813229678d8d4c0c2ba689c61b83c786e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8653136b2ad2ac8d360ad6edca9a3bd813229678d8d4c0c2ba689c61b83c786e"}
{"level":"info","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8653136b2ad2ac8d360ad6edca9a3bd813229678d8d4c0c2ba689c61b83c786e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30ed6fc50b7e0098023cdbe69dd0ef71647761004aa123ddd5678349a7f7ff77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30ed6fc50b7e0098023cdbe69dd0ef71647761004aa123ddd5678349a7f7ff77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30ed6fc50b7e0098023cdbe69dd0ef71647761004aa123ddd5678349a7f7ff77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8653136b2ad2ac8d360ad6edca9a3bd813229678d8d4c0c2ba689c61b83c786e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30ed6fc50b7e0098023cdbe69dd0ef71647761004aa123ddd5678349a7f7ff77","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8653136b2ad2ac8d360ad6edca9a3bd813229678d8d4c0c2ba689c61b83c786e"}
{"level":"debug","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8653136b2ad2ac8d360ad6edca9a3bd813229678d8d4c0c2ba689c61b83c786e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8653136b2ad2ac8d360ad6edca9a3bd813229678d8d4c0c2ba689c61b83c786e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30ed6fc50b7e0098023cdbe69dd0ef71647761004aa123ddd5678349a7f7ff77"}
{"level":"info","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8653136b2ad2ac8d360ad6edca9a3bd813229678d8d4c0c2ba689c61b83c786e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8653136b2ad2ac8d360ad6edca9a3bd813229678d8d4c0c2ba689c61b83c786e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8653136b2ad2ac8d360ad6edca9a3bd813229678d8d4c0c2ba689c61b83c786e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8653136b2ad2ac8d360ad6edca9a3bd813229678d8d4c0c2ba689c61b83c786e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2157b5d1e8ca477f7c65054b59dab526858089433f22a7f4d4de0f402b57044","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8653136b2ad2ac8d360ad6edca9a3bd813229678d8d4c0c2ba689c61b83c786e"}
{"level":"info","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2157b5d1e8ca477f7c65054b59dab526858089433f22a7f4d4de0f402b57044","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8653136b2ad2ac8d360ad6edca9a3bd813229678d8d4c0c2ba689c61b83c786e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8653136b2ad2ac8d360ad6edca9a3bd813229678d8d4c0c2ba689c61b83c786e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8653136b2ad2ac8d360ad6edca9a3bd813229678d8d4c0c2ba689c61b83c786e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2157b5d1e8ca477f7c65054b59dab526858089433f22a7f4d4de0f402b57044","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2157b5d1e8ca477f7c65054b59dab526858089433f22a7f4d4de0f402b57044","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8653136b2ad2ac8d360ad6edca9a3bd813229678d8d4c0c2ba689c61b83c786e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2157b5d1e8ca477f7c65054b59dab526858089433f22a7f4d4de0f402b57044","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2157b5d1e8ca477f7c65054b59dab526858089433f22a7f4d4de0f402b57044"}
{"level":"debug","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2157b5d1e8ca477f7c65054b59dab526858089433f22a7f4d4de0f402b57044","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2157b5d1e8ca477f7c65054b59dab526858089433f22a7f4d4de0f402b57044"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2157b5d1e8ca477f7c65054b59dab526858089433f22a7f4d4de0f402b57044","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2157b5d1e8ca477f7c65054b59dab526858089433f22a7f4d4de0f402b57044","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8653136b2ad2ac8d360ad6edca9a3bd813229678d8d4c0c2ba689c61b83c786e"}
{"level":"debug","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4255aea4e1db8efd1f68fd736c93cad1c93df447348f3e5c14dbb6c41a5de8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2157b5d1e8ca477f7c65054b59dab526858089433f22a7f4d4de0f402b57044"}
{"level":"info","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4255aea4e1db8efd1f68fd736c93cad1c93df447348f3e5c14dbb6c41a5de8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4255aea4e1db8efd1f68fd736c93cad1c93df447348f3e5c14dbb6c41a5de8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4255aea4e1db8efd1f68fd736c93cad1c93df447348f3e5c14dbb6c41a5de8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4255aea4e1db8efd1f68fd736c93cad1c93df447348f3e5c14dbb6c41a5de8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4255aea4e1db8efd1f68fd736c93cad1c93df447348f3e5c14dbb6c41a5de8e"}
{"level":"error","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c4255aea4e1db8efd1f68fd736c93cad1c93df447348f3e5c14dbb6c41a5de8e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c4255aea4e1db8efd1f68fd736c93cad1c93df447348f3e5c14dbb6c41a5de8e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4255aea4e1db8efd1f68fd736c93cad1c93df447348f3e5c14dbb6c41a5de8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4255aea4e1db8efd1f68fd736c93cad1c93df447348f3e5c14dbb6c41a5de8e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4255aea4e1db8efd1f68fd736c93cad1c93df447348f3e5c14dbb6c41a5de8e"}
{"level":"debug","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4255aea4e1db8efd1f68fd736c93cad1c93df447348f3e5c14dbb6c41a5de8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4255aea4e1db8efd1f68fd736c93cad1c93df447348f3e5c14dbb6c41a5de8e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4255aea4e1db8efd1f68fd736c93cad1c93df447348f3e5c14dbb6c41a5de8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4255aea4e1db8efd1f68fd736c93cad1c93df447348f3e5c14dbb6c41a5de8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4255aea4e1db8efd1f68fd736c93cad1c93df447348f3e5c14dbb6c41a5de8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4255aea4e1db8efd1f68fd736c93cad1c93df447348f3e5c14dbb6c41a5de8e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4255aea4e1db8efd1f68fd736c93cad1c93df447348f3e5c14dbb6c41a5de8e"}
{"level":"debug","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4255aea4e1db8efd1f68fd736c93cad1c93df447348f3e5c14dbb6c41a5de8e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4255aea4e1db8efd1f68fd736c93cad1c93df447348f3e5c14dbb6c41a5de8e"}
{"level":"debug","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4255aea4e1db8efd1f68fd736c93cad1c93df447348f3e5c14dbb6c41a5de8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4255aea4e1db8efd1f68fd736c93cad1c93df447348f3e5c14dbb6c41a5de8e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4255aea4e1db8efd1f68fd736c93cad1c93df447348f3e5c14dbb6c41a5de8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4255aea4e1db8efd1f68fd736c93cad1c93df447348f3e5c14dbb6c41a5de8e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4255aea4e1db8efd1f68fd736c93cad1c93df447348f3e5c14dbb6c41a5de8e"}
{"level":"debug","ts":"2026-07-10T02:55:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153"}
{"level":"debug","ts":"2026-07-10T02:55:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153"}
{"level":"debug","ts":"2026-07-10T02:55:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153"}
{"level":"debug","ts":"2026-07-10T02:55:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153"}
{"level":"debug","ts":"2026-07-10T02:55:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153"}
{"level":"debug","ts":"2026-07-10T02:55:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153"}
{"level":"debug","ts":"2026-07-10T02:55:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153"}
{"level":"debug","ts":"2026-07-10T02:55:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153"}
{"level":"debug","ts":"2026-07-10T02:55:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153"}
{"level":"debug","ts":"2026-07-10T02:55:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153"}
{"level":"debug","ts":"2026-07-10T02:55:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153"}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153"}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153"}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd"}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153"}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd"}
{"level":"error","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153"}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd"}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153"}
{"level":"error","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd"}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153"}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29b29da7a2ad0e1121f6263a3949966701d8f40f6e4c62c0d0354d58d2c3271a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29b29da7a2ad0e1121f6263a3949966701d8f40f6e4c62c0d0354d58d2c3271a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd"}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29b29da7a2ad0e1121f6263a3949966701d8f40f6e4c62c0d0354d58d2c3271a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29b29da7a2ad0e1121f6263a3949966701d8f40f6e4c62c0d0354d58d2c3271a"}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29b29da7a2ad0e1121f6263a3949966701d8f40f6e4c62c0d0354d58d2c3271a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153"}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29b29da7a2ad0e1121f6263a3949966701d8f40f6e4c62c0d0354d58d2c3271a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29b29da7a2ad0e1121f6263a3949966701d8f40f6e4c62c0d0354d58d2c3271a"}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29b29da7a2ad0e1121f6263a3949966701d8f40f6e4c62c0d0354d58d2c3271a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29b29da7a2ad0e1121f6263a3949966701d8f40f6e4c62c0d0354d58d2c3271a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29b29da7a2ad0e1121f6263a3949966701d8f40f6e4c62c0d0354d58d2c3271a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2063d7a1a7305859efa6862cba2058350d6c1d1d1997559c57dddd8b2e9bf6e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd"}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2063d7a1a7305859efa6862cba2058350d6c1d1d1997559c57dddd8b2e9bf6e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29b29da7a2ad0e1121f6263a3949966701d8f40f6e4c62c0d0354d58d2c3271a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2063d7a1a7305859efa6862cba2058350d6c1d1d1997559c57dddd8b2e9bf6e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2063d7a1a7305859efa6862cba2058350d6c1d1d1997559c57dddd8b2e9bf6e5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153"}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2063d7a1a7305859efa6862cba2058350d6c1d1d1997559c57dddd8b2e9bf6e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2063d7a1a7305859efa6862cba2058350d6c1d1d1997559c57dddd8b2e9bf6e5"}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2063d7a1a7305859efa6862cba2058350d6c1d1d1997559c57dddd8b2e9bf6e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2063d7a1a7305859efa6862cba2058350d6c1d1d1997559c57dddd8b2e9bf6e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2063d7a1a7305859efa6862cba2058350d6c1d1d1997559c57dddd8b2e9bf6e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2063d7a1a7305859efa6862cba2058350d6c1d1d1997559c57dddd8b2e9bf6e5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29b29da7a2ad0e1121f6263a3949966701d8f40f6e4c62c0d0354d58d2c3271a"}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2063d7a1a7305859efa6862cba2058350d6c1d1d1997559c57dddd8b2e9bf6e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2063d7a1a7305859efa6862cba2058350d6c1d1d1997559c57dddd8b2e9bf6e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2063d7a1a7305859efa6862cba2058350d6c1d1d1997559c57dddd8b2e9bf6e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2063d7a1a7305859efa6862cba2058350d6c1d1d1997559c57dddd8b2e9bf6e5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2063d7a1a7305859efa6862cba2058350d6c1d1d1997559c57dddd8b2e9bf6e5"}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2063d7a1a7305859efa6862cba2058350d6c1d1d1997559c57dddd8b2e9bf6e5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2063d7a1a7305859efa6862cba2058350d6c1d1d1997559c57dddd8b2e9bf6e5"}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2063d7a1a7305859efa6862cba2058350d6c1d1d1997559c57dddd8b2e9bf6e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2063d7a1a7305859efa6862cba2058350d6c1d1d1997559c57dddd8b2e9bf6e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2063d7a1a7305859efa6862cba2058350d6c1d1d1997559c57dddd8b2e9bf6e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2063d7a1a7305859efa6862cba2058350d6c1d1d1997559c57dddd8b2e9bf6e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2063d7a1a7305859efa6862cba2058350d6c1d1d1997559c57dddd8b2e9bf6e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2063d7a1a7305859efa6862cba2058350d6c1d1d1997559c57dddd8b2e9bf6e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2063d7a1a7305859efa6862cba2058350d6c1d1d1997559c57dddd8b2e9bf6e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd6e21d33dd82db32b3b9418c437698d2415e1c42f30f6ff97deab296d24b234","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd6e21d33dd82db32b3b9418c437698d2415e1c42f30f6ff97deab296d24b234","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2063d7a1a7305859efa6862cba2058350d6c1d1d1997559c57dddd8b2e9bf6e5"}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd6e21d33dd82db32b3b9418c437698d2415e1c42f30f6ff97deab296d24b234","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd6e21d33dd82db32b3b9418c437698d2415e1c42f30f6ff97deab296d24b234","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2063d7a1a7305859efa6862cba2058350d6c1d1d1997559c57dddd8b2e9bf6e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2063d7a1a7305859efa6862cba2058350d6c1d1d1997559c57dddd8b2e9bf6e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd6e21d33dd82db32b3b9418c437698d2415e1c42f30f6ff97deab296d24b234"}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2063d7a1a7305859efa6862cba2058350d6c1d1d1997559c57dddd8b2e9bf6e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd6e21d33dd82db32b3b9418c437698d2415e1c42f30f6ff97deab296d24b234","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd6e21d33dd82db32b3b9418c437698d2415e1c42f30f6ff97deab296d24b234"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd6e21d33dd82db32b3b9418c437698d2415e1c42f30f6ff97deab296d24b234","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2063d7a1a7305859efa6862cba2058350d6c1d1d1997559c57dddd8b2e9bf6e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2063d7a1a7305859efa6862cba2058350d6c1d1d1997559c57dddd8b2e9bf6e5"}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2063d7a1a7305859efa6862cba2058350d6c1d1d1997559c57dddd8b2e9bf6e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd6e21d33dd82db32b3b9418c437698d2415e1c42f30f6ff97deab296d24b234","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd6e21d33dd82db32b3b9418c437698d2415e1c42f30f6ff97deab296d24b234"}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd6e21d33dd82db32b3b9418c437698d2415e1c42f30f6ff97deab296d24b234","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2063d7a1a7305859efa6862cba2058350d6c1d1d1997559c57dddd8b2e9bf6e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd6e21d33dd82db32b3b9418c437698d2415e1c42f30f6ff97deab296d24b234","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd6e21d33dd82db32b3b9418c437698d2415e1c42f30f6ff97deab296d24b234"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd6e21d33dd82db32b3b9418c437698d2415e1c42f30f6ff97deab296d24b234","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2063d7a1a7305859efa6862cba2058350d6c1d1d1997559c57dddd8b2e9bf6e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd6e21d33dd82db32b3b9418c437698d2415e1c42f30f6ff97deab296d24b234","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd6e21d33dd82db32b3b9418c437698d2415e1c42f30f6ff97deab296d24b234"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2063d7a1a7305859efa6862cba2058350d6c1d1d1997559c57dddd8b2e9bf6e5"}
{"level":"error","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fd6e21d33dd82db32b3b9418c437698d2415e1c42f30f6ff97deab296d24b234","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fd6e21d33dd82db32b3b9418c437698d2415e1c42f30f6ff97deab296d24b234\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd6e21d33dd82db32b3b9418c437698d2415e1c42f30f6ff97deab296d24b234","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd6e21d33dd82db32b3b9418c437698d2415e1c42f30f6ff97deab296d24b234","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2063d7a1a7305859efa6862cba2058350d6c1d1d1997559c57dddd8b2e9bf6e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2063d7a1a7305859efa6862cba2058350d6c1d1d1997559c57dddd8b2e9bf6e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd6e21d33dd82db32b3b9418c437698d2415e1c42f30f6ff97deab296d24b234"}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2063d7a1a7305859efa6862cba2058350d6c1d1d1997559c57dddd8b2e9bf6e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd6e21d33dd82db32b3b9418c437698d2415e1c42f30f6ff97deab296d24b234","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2063d7a1a7305859efa6862cba2058350d6c1d1d1997559c57dddd8b2e9bf6e5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd6e21d33dd82db32b3b9418c437698d2415e1c42f30f6ff97deab296d24b234"}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd6e21d33dd82db32b3b9418c437698d2415e1c42f30f6ff97deab296d24b234","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd6e21d33dd82db32b3b9418c437698d2415e1c42f30f6ff97deab296d24b234"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd6e21d33dd82db32b3b9418c437698d2415e1c42f30f6ff97deab296d24b234","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2063d7a1a7305859efa6862cba2058350d6c1d1d1997559c57dddd8b2e9bf6e5"}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd6e21d33dd82db32b3b9418c437698d2415e1c42f30f6ff97deab296d24b234","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd6e21d33dd82db32b3b9418c437698d2415e1c42f30f6ff97deab296d24b234","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd6e21d33dd82db32b3b9418c437698d2415e1c42f30f6ff97deab296d24b234","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd6e21d33dd82db32b3b9418c437698d2415e1c42f30f6ff97deab296d24b234"}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd6e21d33dd82db32b3b9418c437698d2415e1c42f30f6ff97deab296d24b234","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b240d1171784846d4fe46a5c503fb77b990915cef9a4d1e6405f9e6cec17855e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd6e21d33dd82db32b3b9418c437698d2415e1c42f30f6ff97deab296d24b234"}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b240d1171784846d4fe46a5c503fb77b990915cef9a4d1e6405f9e6cec17855e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd6e21d33dd82db32b3b9418c437698d2415e1c42f30f6ff97deab296d24b234","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd6e21d33dd82db32b3b9418c437698d2415e1c42f30f6ff97deab296d24b234"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b240d1171784846d4fe46a5c503fb77b990915cef9a4d1e6405f9e6cec17855e"}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd6e21d33dd82db32b3b9418c437698d2415e1c42f30f6ff97deab296d24b234","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b240d1171784846d4fe46a5c503fb77b990915cef9a4d1e6405f9e6cec17855e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b240d1171784846d4fe46a5c503fb77b990915cef9a4d1e6405f9e6cec17855e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd6e21d33dd82db32b3b9418c437698d2415e1c42f30f6ff97deab296d24b234","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b240d1171784846d4fe46a5c503fb77b990915cef9a4d1e6405f9e6cec17855e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b240d1171784846d4fe46a5c503fb77b990915cef9a4d1e6405f9e6cec17855e"}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b240d1171784846d4fe46a5c503fb77b990915cef9a4d1e6405f9e6cec17855e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b240d1171784846d4fe46a5c503fb77b990915cef9a4d1e6405f9e6cec17855e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b240d1171784846d4fe46a5c503fb77b990915cef9a4d1e6405f9e6cec17855e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b240d1171784846d4fe46a5c503fb77b990915cef9a4d1e6405f9e6cec17855e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd6e21d33dd82db32b3b9418c437698d2415e1c42f30f6ff97deab296d24b234"}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a27cf88b291472af5c4428c9cab94828fb02317d9afd288122c0631bb591a274","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b240d1171784846d4fe46a5c503fb77b990915cef9a4d1e6405f9e6cec17855e"}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a27cf88b291472af5c4428c9cab94828fb02317d9afd288122c0631bb591a274","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2854b265d3713a18458f4c70d004ee7a904e1079143273399db34bf255b5fbd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a27cf88b291472af5c4428c9cab94828fb02317d9afd288122c0631bb591a274"}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b240d1171784846d4fe46a5c503fb77b990915cef9a4d1e6405f9e6cec17855e"}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2854b265d3713a18458f4c70d004ee7a904e1079143273399db34bf255b5fbd8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a27cf88b291472af5c4428c9cab94828fb02317d9afd288122c0631bb591a274","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a27cf88b291472af5c4428c9cab94828fb02317d9afd288122c0631bb591a274"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2854b265d3713a18458f4c70d004ee7a904e1079143273399db34bf255b5fbd8"}
{"level":"info","ts":"2026-07-10T02:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a27cf88b291472af5c4428c9cab94828fb02317d9afd288122c0631bb591a274"}
{"level":"info","ts":"2026-07-10T02:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a27cf88b291472af5c4428c9cab94828fb02317d9afd288122c0631bb591a274","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2854b265d3713a18458f4c70d004ee7a904e1079143273399db34bf255b5fbd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2854b265d3713a18458f4c70d004ee7a904e1079143273399db34bf255b5fbd8"}
{"level":"info","ts":"2026-07-10T02:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a27cf88b291472af5c4428c9cab94828fb02317d9afd288122c0631bb591a274"}
{"level":"info","ts":"2026-07-10T02:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2854b265d3713a18458f4c70d004ee7a904e1079143273399db34bf255b5fbd8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a27cf88b291472af5c4428c9cab94828fb02317d9afd288122c0631bb591a274","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2854b265d3713a18458f4c70d004ee7a904e1079143273399db34bf255b5fbd8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2854b265d3713a18458f4c70d004ee7a904e1079143273399db34bf255b5fbd8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2854b265d3713a18458f4c70d004ee7a904e1079143273399db34bf255b5fbd8"}
{"level":"debug","ts":"2026-07-10T02:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2854b265d3713a18458f4c70d004ee7a904e1079143273399db34bf255b5fbd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2854b265d3713a18458f4c70d004ee7a904e1079143273399db34bf255b5fbd8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2854b265d3713a18458f4c70d004ee7a904e1079143273399db34bf255b5fbd8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2854b265d3713a18458f4c70d004ee7a904e1079143273399db34bf255b5fbd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2854b265d3713a18458f4c70d004ee7a904e1079143273399db34bf255b5fbd8"}
{"level":"info","ts":"2026-07-10T02:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2854b265d3713a18458f4c70d004ee7a904e1079143273399db34bf255b5fbd8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2854b265d3713a18458f4c70d004ee7a904e1079143273399db34bf255b5fbd8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2854b265d3713a18458f4c70d004ee7a904e1079143273399db34bf255b5fbd8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2854b265d3713a18458f4c70d004ee7a904e1079143273399db34bf255b5fbd8"}
{"level":"debug","ts":"2026-07-10T02:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2854b265d3713a18458f4c70d004ee7a904e1079143273399db34bf255b5fbd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2854b265d3713a18458f4c70d004ee7a904e1079143273399db34bf255b5fbd8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2854b265d3713a18458f4c70d004ee7a904e1079143273399db34bf255b5fbd8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2854b265d3713a18458f4c70d004ee7a904e1079143273399db34bf255b5fbd8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2854b265d3713a18458f4c70d004ee7a904e1079143273399db34bf255b5fbd8"}
{"level":"debug","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16042a4540bd3350fa746c839df0bd588e2fd961f1752bd6e1c3d8bbaafb2988","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16042a4540bd3350fa746c839df0bd588e2fd961f1752bd6e1c3d8bbaafb2988","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16042a4540bd3350fa746c839df0bd588e2fd961f1752bd6e1c3d8bbaafb2988","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16042a4540bd3350fa746c839df0bd588e2fd961f1752bd6e1c3d8bbaafb2988","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16042a4540bd3350fa746c839df0bd588e2fd961f1752bd6e1c3d8bbaafb2988"}
{"level":"debug","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16042a4540bd3350fa746c839df0bd588e2fd961f1752bd6e1c3d8bbaafb2988","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16042a4540bd3350fa746c839df0bd588e2fd961f1752bd6e1c3d8bbaafb2988"}
{"level":"debug","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16042a4540bd3350fa746c839df0bd588e2fd961f1752bd6e1c3d8bbaafb2988","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16042a4540bd3350fa746c839df0bd588e2fd961f1752bd6e1c3d8bbaafb2988"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16042a4540bd3350fa746c839df0bd588e2fd961f1752bd6e1c3d8bbaafb2988","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16042a4540bd3350fa746c839df0bd588e2fd961f1752bd6e1c3d8bbaafb2988","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16042a4540bd3350fa746c839df0bd588e2fd961f1752bd6e1c3d8bbaafb2988","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16042a4540bd3350fa746c839df0bd588e2fd961f1752bd6e1c3d8bbaafb2988","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16042a4540bd3350fa746c839df0bd588e2fd961f1752bd6e1c3d8bbaafb2988","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16042a4540bd3350fa746c839df0bd588e2fd961f1752bd6e1c3d8bbaafb2988"}
{"level":"debug","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16042a4540bd3350fa746c839df0bd588e2fd961f1752bd6e1c3d8bbaafb2988","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16042a4540bd3350fa746c839df0bd588e2fd961f1752bd6e1c3d8bbaafb2988"}
{"level":"debug","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16042a4540bd3350fa746c839df0bd588e2fd961f1752bd6e1c3d8bbaafb2988","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16042a4540bd3350fa746c839df0bd588e2fd961f1752bd6e1c3d8bbaafb2988"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16042a4540bd3350fa746c839df0bd588e2fd961f1752bd6e1c3d8bbaafb2988","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16042a4540bd3350fa746c839df0bd588e2fd961f1752bd6e1c3d8bbaafb2988","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd"}
{"level":"debug","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16042a4540bd3350fa746c839df0bd588e2fd961f1752bd6e1c3d8bbaafb2988"}
{"level":"info","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd"}
{"level":"debug","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd"}
{"level":"debug","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd"}
{"level":"debug","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd"}
{"level":"debug","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6af47e9fafd401a33f51d18eb1020d6188508703bd1af990e7fe908a257745fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6af47e9fafd401a33f51d18eb1020d6188508703bd1af990e7fe908a257745fd"}
{"level":"info","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6af47e9fafd401a33f51d18eb1020d6188508703bd1af990e7fe908a257745fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6af47e9fafd401a33f51d18eb1020d6188508703bd1af990e7fe908a257745fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6af47e9fafd401a33f51d18eb1020d6188508703bd1af990e7fe908a257745fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd"}
{"level":"info","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6af47e9fafd401a33f51d18eb1020d6188508703bd1af990e7fe908a257745fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6af47e9fafd401a33f51d18eb1020d6188508703bd1af990e7fe908a257745fd"}
{"level":"info","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6af47e9fafd401a33f51d18eb1020d6188508703bd1af990e7fe908a257745fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd"}
{"level":"debug","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6af47e9fafd401a33f51d18eb1020d6188508703bd1af990e7fe908a257745fd"}
{"level":"info","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28b2f0654b968a4dcfd05bc712bab908defd9fa17263304883653474c9a65e88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd"}
{"level":"info","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28b2f0654b968a4dcfd05bc712bab908defd9fa17263304883653474c9a65e88"}
{"level":"info","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd"}
{"level":"info","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30ed6fc50b7e0098023cdbe69dd0ef71647761004aa123ddd5678349a7f7ff77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd"}
{"level":"info","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30ed6fc50b7e0098023cdbe69dd0ef71647761004aa123ddd5678349a7f7ff77"}
{"level":"debug","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd"}
{"level":"debug","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b0414b83283b9dac3a6c6ecb0ee13025e9c7f368f0503f8e009e14c2555a374","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b0414b83283b9dac3a6c6ecb0ee13025e9c7f368f0503f8e009e14c2555a374","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b0414b83283b9dac3a6c6ecb0ee13025e9c7f368f0503f8e009e14c2555a374","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b0414b83283b9dac3a6c6ecb0ee13025e9c7f368f0503f8e009e14c2555a374","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b0414b83283b9dac3a6c6ecb0ee13025e9c7f368f0503f8e009e14c2555a374"}
{"level":"debug","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b0414b83283b9dac3a6c6ecb0ee13025e9c7f368f0503f8e009e14c2555a374","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b0414b83283b9dac3a6c6ecb0ee13025e9c7f368f0503f8e009e14c2555a374"}
{"level":"debug","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b0414b83283b9dac3a6c6ecb0ee13025e9c7f368f0503f8e009e14c2555a374","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b0414b83283b9dac3a6c6ecb0ee13025e9c7f368f0503f8e009e14c2555a374"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b0414b83283b9dac3a6c6ecb0ee13025e9c7f368f0503f8e009e14c2555a374","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd"}
{"level":"info","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b0414b83283b9dac3a6c6ecb0ee13025e9c7f368f0503f8e009e14c2555a374","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b0414b83283b9dac3a6c6ecb0ee13025e9c7f368f0503f8e009e14c2555a374","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cb90f8d2e82a6fc77528c5a52afed9d64b11e46b2a9a265d52a24e47119fdfa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b0414b83283b9dac3a6c6ecb0ee13025e9c7f368f0503f8e009e14c2555a374"}
{"level":"info","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b0414b83283b9dac3a6c6ecb0ee13025e9c7f368f0503f8e009e14c2555a374","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b0414b83283b9dac3a6c6ecb0ee13025e9c7f368f0503f8e009e14c2555a374"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b0414b83283b9dac3a6c6ecb0ee13025e9c7f368f0503f8e009e14c2555a374","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cb90f8d2e82a6fc77528c5a52afed9d64b11e46b2a9a265d52a24e47119fdfa"}
{"level":"debug","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b0414b83283b9dac3a6c6ecb0ee13025e9c7f368f0503f8e009e14c2555a374","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd"}
{"level":"info","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b0414b83283b9dac3a6c6ecb0ee13025e9c7f368f0503f8e009e14c2555a374"}
{"level":"debug","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b240d1171784846d4fe46a5c503fb77b990915cef9a4d1e6405f9e6cec17855e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b240d1171784846d4fe46a5c503fb77b990915cef9a4d1e6405f9e6cec17855e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b240d1171784846d4fe46a5c503fb77b990915cef9a4d1e6405f9e6cec17855e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b240d1171784846d4fe46a5c503fb77b990915cef9a4d1e6405f9e6cec17855e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b240d1171784846d4fe46a5c503fb77b990915cef9a4d1e6405f9e6cec17855e"}
{"level":"debug","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b240d1171784846d4fe46a5c503fb77b990915cef9a4d1e6405f9e6cec17855e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b240d1171784846d4fe46a5c503fb77b990915cef9a4d1e6405f9e6cec17855e"}
{"level":"debug","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b240d1171784846d4fe46a5c503fb77b990915cef9a4d1e6405f9e6cec17855e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b240d1171784846d4fe46a5c503fb77b990915cef9a4d1e6405f9e6cec17855e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b240d1171784846d4fe46a5c503fb77b990915cef9a4d1e6405f9e6cec17855e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b240d1171784846d4fe46a5c503fb77b990915cef9a4d1e6405f9e6cec17855e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2157b5d1e8ca477f7c65054b59dab526858089433f22a7f4d4de0f402b57044","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2854b265d3713a18458f4c70d004ee7a904e1079143273399db34bf255b5fbd8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b240d1171784846d4fe46a5c503fb77b990915cef9a4d1e6405f9e6cec17855e"}
{"level":"debug","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2063d7a1a7305859efa6862cba2058350d6c1d1d1997559c57dddd8b2e9bf6e5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2157b5d1e8ca477f7c65054b59dab526858089433f22a7f4d4de0f402b57044"}
{"level":"info","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2854b265d3713a18458f4c70d004ee7a904e1079143273399db34bf255b5fbd8"}
{"level":"debug","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"707f119cecb60316a9e2712014924194bd19c0409d7d9d67cbba125818f9e572","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2063d7a1a7305859efa6862cba2058350d6c1d1d1997559c57dddd8b2e9bf6e5"}
{"level":"debug","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a27cf88b291472af5c4428c9cab94828fb02317d9afd288122c0631bb591a274","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/707f119cecb60316a9e2712014924194bd19c0409d7d9d67cbba125818f9e572"}
{"level":"debug","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29b29da7a2ad0e1121f6263a3949966701d8f40f6e4c62c0d0354d58d2c3271a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a27cf88b291472af5c4428c9cab94828fb02317d9afd288122c0631bb591a274"}
{"level":"info","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29b29da7a2ad0e1121f6263a3949966701d8f40f6e4c62c0d0354d58d2c3271a"}
{"level":"debug","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab8dcdf999e749e710c1e7a5a686ae4956ba4999a675814cdae1915e271bdcd1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab8dcdf999e749e710c1e7a5a686ae4956ba4999a675814cdae1915e271bdcd1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab8dcdf999e749e710c1e7a5a686ae4956ba4999a675814cdae1915e271bdcd1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab8dcdf999e749e710c1e7a5a686ae4956ba4999a675814cdae1915e271bdcd1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"367fb2dd41d44c1f8b8bba7560bd4a01103df781a8002c670be23938bc43f099","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab8dcdf999e749e710c1e7a5a686ae4956ba4999a675814cdae1915e271bdcd1"}
{"level":"debug","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab8dcdf999e749e710c1e7a5a686ae4956ba4999a675814cdae1915e271bdcd1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab8dcdf999e749e710c1e7a5a686ae4956ba4999a675814cdae1915e271bdcd1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/367fb2dd41d44c1f8b8bba7560bd4a01103df781a8002c670be23938bc43f099"}
{"level":"info","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab8dcdf999e749e710c1e7a5a686ae4956ba4999a675814cdae1915e271bdcd1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13031bb16d04f6ebbf3399e33ab04943fa34a8f6cb55f41c48ec741b32d37691","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab8dcdf999e749e710c1e7a5a686ae4956ba4999a675814cdae1915e271bdcd1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab8dcdf999e749e710c1e7a5a686ae4956ba4999a675814cdae1915e271bdcd1"}
{"level":"info","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab8dcdf999e749e710c1e7a5a686ae4956ba4999a675814cdae1915e271bdcd1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab8dcdf999e749e710c1e7a5a686ae4956ba4999a675814cdae1915e271bdcd1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab8dcdf999e749e710c1e7a5a686ae4956ba4999a675814cdae1915e271bdcd1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab8dcdf999e749e710c1e7a5a686ae4956ba4999a675814cdae1915e271bdcd1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab8dcdf999e749e710c1e7a5a686ae4956ba4999a675814cdae1915e271bdcd1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab8dcdf999e749e710c1e7a5a686ae4956ba4999a675814cdae1915e271bdcd1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153"}
{"level":"error","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ab8dcdf999e749e710c1e7a5a686ae4956ba4999a675814cdae1915e271bdcd1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ab8dcdf999e749e710c1e7a5a686ae4956ba4999a675814cdae1915e271bdcd1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab8dcdf999e749e710c1e7a5a686ae4956ba4999a675814cdae1915e271bdcd1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8653136b2ad2ac8d360ad6edca9a3bd813229678d8d4c0c2ba689c61b83c786e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab8dcdf999e749e710c1e7a5a686ae4956ba4999a675814cdae1915e271bdcd1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13031bb16d04f6ebbf3399e33ab04943fa34a8f6cb55f41c48ec741b32d37691"}
{"level":"debug","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2911975eda36b6ef52d68765a70fc00ee031d3913c0641bae89338cf2fb2d859","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab8dcdf999e749e710c1e7a5a686ae4956ba4999a675814cdae1915e271bdcd1"}
{"level":"debug","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"621fe045a7953de468b49b960edeb17ca015e260751e5af80bc07b506b04bc46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4255aea4e1db8efd1f68fd736c93cad1c93df447348f3e5c14dbb6c41a5de8e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8653136b2ad2ac8d360ad6edca9a3bd813229678d8d4c0c2ba689c61b83c786e"}
{"level":"info","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2911975eda36b6ef52d68765a70fc00ee031d3913c0641bae89338cf2fb2d859"}
{"level":"debug","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/621fe045a7953de468b49b960edeb17ca015e260751e5af80bc07b506b04bc46"}
{"level":"debug","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd6e21d33dd82db32b3b9418c437698d2415e1c42f30f6ff97deab296d24b234","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4255aea4e1db8efd1f68fd736c93cad1c93df447348f3e5c14dbb6c41a5de8e"}
{"level":"info","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c"}
{"level":"info","ts":"2026-07-10T02:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd6e21d33dd82db32b3b9418c437698d2415e1c42f30f6ff97deab296d24b234"}
{"level":"info","ts":"2026-07-10T02:55:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b73c52da-b777-4b84-8bdf-199a9099be25","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:43538","PortSpecifier":{"PortValue":43538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b73c52da-b777-4b84-8bdf-199a9099be25","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:55:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b73c52da-b777-4b84-8bdf-199a9099be25","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:43538","PortSpecifier":{"PortValue":43538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783652133,"nanos":900054072},"http":{"id":"b73c52da-b777-4b84-8bdf-199a9099be25","method":"POST","headers":{":authority":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:55:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b73c52da-b777-4b84-8bdf-199a9099be25","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T02:55:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b73c52da-b777-4b84-8bdf-199a9099be25","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f57a24c5-3349-4201-bb76-57629a222ea1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ecdb5a27-a9da-408c-8428-a399f0e5aa0e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9f5c3fb617ad"]}}
{"level":"debug","ts":"2026-07-10T02:55:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b73c52da-b777-4b84-8bdf-199a9099be25","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9f5c3fb617ad"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ecdb5a27-a9da-408c-8428-a399f0e5aa0e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f57a24c5-3349-4201-bb76-57629a222ea1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7b0414b83283b9dac3a6c6ecb0ee13025e9c7f368f0503f8e009e14c2555a374"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:55:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b73c52da-b777-4b84-8bdf-199a9099be25","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b73c52da-b777-4b84-8bdf-199a9099be25","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b73c52da-b777-4b84-8bdf-199a9099be25","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b73c52da-b777-4b84-8bdf-199a9099be25","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T02:55:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b73c52da-b777-4b84-8bdf-199a9099be25","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:55:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b73c52da-b777-4b84-8bdf-199a9099be25","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T02:55:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b73c52da-b777-4b84-8bdf-199a9099be25","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:55:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b73c52da-b777-4b84-8bdf-199a9099be25","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:55:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"435b3c87-8d4d-495c-a544-af8fdda736f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:34050","PortSpecifier":{"PortValue":34050}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"435b3c87-8d4d-495c-a544-af8fdda736f3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-de8279.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:55:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"435b3c87-8d4d-495c-a544-af8fdda736f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:34050","PortSpecifier":{"PortValue":34050}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783652133,"nanos":943400350},"http":{"id":"435b3c87-8d4d-495c-a544-af8fdda736f3","method":"POST","headers":{":authority":"e2e-shared-b-de8279.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:55:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"435b3c87-8d4d-495c-a544-af8fdda736f3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T02:55:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"435b3c87-8d4d-495c-a544-af8fdda736f3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f57a24c5-3349-4201-bb76-57629a222ea1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ecdb5a27-a9da-408c-8428-a399f0e5aa0e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9f5c3fb617ad"]}}
{"level":"debug","ts":"2026-07-10T02:55:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"435b3c87-8d4d-495c-a544-af8fdda736f3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9f5c3fb617ad"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ecdb5a27-a9da-408c-8428-a399f0e5aa0e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f57a24c5-3349-4201-bb76-57629a222ea1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"621fe045a7953de468b49b960edeb17ca015e260751e5af80bc07b506b04bc46"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-de8279.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:55:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"435b3c87-8d4d-495c-a544-af8fdda736f3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"435b3c87-8d4d-495c-a544-af8fdda736f3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"435b3c87-8d4d-495c-a544-af8fdda736f3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-de8279/rate-test-model-de8279\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"435b3c87-8d4d-495c-a544-af8fdda736f3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T02:55:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"435b3c87-8d4d-495c-a544-af8fdda736f3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:55:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"435b3c87-8d4d-495c-a544-af8fdda736f3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T02:55:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"435b3c87-8d4d-495c-a544-af8fdda736f3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:55:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"435b3c87-8d4d-495c-a544-af8fdda736f3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:55:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d05a418-c4dc-4087-b152-7607dc9f0c69","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:43542","PortSpecifier":{"PortValue":43542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6d05a418-c4dc-4087-b152-7607dc9f0c69","method":"POST","path":"/ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a/v1/completions","host":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:55:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d05a418-c4dc-4087-b152-7607dc9f0c69","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:43542","PortSpecifier":{"PortValue":43542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783652133,"nanos":988969763},"http":{"id":"6d05a418-c4dc-4087-b152-7607dc9f0c69","method":"POST","headers":{":authority":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:55:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6d05a418-c4dc-4087-b152-7607dc9f0c69","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-oCT541FSdx71Z9ZO_88WJU3jU8otcnTP4lmdXkKHWgx9KpCv5aaYuZwymFpo"}
{"level":"debug","ts":"2026-07-10T02:55:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6d05a418-c4dc-4087-b152-7607dc9f0c69","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-oCT541FSdx71Z9ZO_88WJU3jU8otcnTP4lmdXkKHWgx9KpCv5aaYuZwymFpo\"}"}
{"level":"debug","ts":"2026-07-10T02:55:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6d05a418-c4dc-4087-b152-7607dc9f0c69","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6f537b4e-5bd4-4ee7-b86a-0a4f4773f24c","keyName":"e2e-rate-a-4a3b9d","subscription":"e2e-rate-iso-a-4a3b9d","tenant":"e2e-shared-a-d5b98a","userId":"6f537b4e-5bd4-4ee7-b86a-0a4f4773f24c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T02:55:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6d05a418-c4dc-4087-b152-7607dc9f0c69","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a\",\"requestedSubscription\":\"e2e-rate-iso-a-4a3b9d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T02:55:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6d05a418-c4dc-4087-b152-7607dc9f0c69","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d5b98a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4a3b9d","namespace":"ai-tenant-e2e-shared-a-d5b98a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T02:55:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6d05a418-c4dc-4087-b152-7607dc9f0c69","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:55:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d05a418-c4dc-4087-b152-7607dc9f0c69","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d05a418-c4dc-4087-b152-7607dc9f0c69","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d05a418-c4dc-4087-b152-7607dc9f0c69","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d05a418-c4dc-4087-b152-7607dc9f0c69","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d05a418-c4dc-4087-b152-7607dc9f0c69","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:55:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d05a418-c4dc-4087-b152-7607dc9f0c69","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4a3b9d"}
{"level":"debug","ts":"2026-07-10T02:55:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d05a418-c4dc-4087-b152-7607dc9f0c69","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T02:55:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d05a418-c4dc-4087-b152-7607dc9f0c69","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6f537b4e-5bd4-4ee7-b86a-0a4f4773f24c","keyName":"e2e-rate-a-4a3b9d","selected_subscription":"e2e-rate-iso-a-4a3b9d","selected_subscription_key":"ai-tenant-e2e-shared-a-d5b98a/e2e-rate-iso-a-4a3b9d@ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d5b98a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4a3b9d","namespace":"ai-tenant-e2e-shared-a-d5b98a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T02:55:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d05a418-c4dc-4087-b152-7607dc9f0c69","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:55:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d05a418-c4dc-4087-b152-7607dc9f0c69","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:55:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e3ec93e-2971-49f0-8bd2-0ea571f15b26","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:43550","PortSpecifier":{"PortValue":43550}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7e3ec93e-2971-49f0-8bd2-0ea571f15b26","method":"POST","path":"/ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a/v1/completions","host":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:55:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e3ec93e-2971-49f0-8bd2-0ea571f15b26","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:43550","PortSpecifier":{"PortValue":43550}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783652135,"nanos":53149986},"http":{"id":"7e3ec93e-2971-49f0-8bd2-0ea571f15b26","method":"POST","headers":{":authority":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:55:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7e3ec93e-2971-49f0-8bd2-0ea571f15b26","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-oCT541FSdx71Z9ZO_88WJU3jU8otcnTP4lmdXkKHWgx9KpCv5aaYuZwymFpo"}
{"level":"debug","ts":"2026-07-10T02:55:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7e3ec93e-2971-49f0-8bd2-0ea571f15b26","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-oCT541FSdx71Z9ZO_88WJU3jU8otcnTP4lmdXkKHWgx9KpCv5aaYuZwymFpo\"}"}
{"level":"debug","ts":"2026-07-10T02:55:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7e3ec93e-2971-49f0-8bd2-0ea571f15b26","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6f537b4e-5bd4-4ee7-b86a-0a4f4773f24c","keyName":"e2e-rate-a-4a3b9d","subscription":"e2e-rate-iso-a-4a3b9d","tenant":"e2e-shared-a-d5b98a","userId":"6f537b4e-5bd4-4ee7-b86a-0a4f4773f24c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T02:55:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7e3ec93e-2971-49f0-8bd2-0ea571f15b26","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a\",\"requestedSubscription\":\"e2e-rate-iso-a-4a3b9d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T02:55:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7e3ec93e-2971-49f0-8bd2-0ea571f15b26","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d5b98a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4a3b9d","namespace":"ai-tenant-e2e-shared-a-d5b98a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T02:55:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7e3ec93e-2971-49f0-8bd2-0ea571f15b26","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:55:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e3ec93e-2971-49f0-8bd2-0ea571f15b26","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e3ec93e-2971-49f0-8bd2-0ea571f15b26","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e3ec93e-2971-49f0-8bd2-0ea571f15b26","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e3ec93e-2971-49f0-8bd2-0ea571f15b26","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e3ec93e-2971-49f0-8bd2-0ea571f15b26","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:55:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e3ec93e-2971-49f0-8bd2-0ea571f15b26","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T02:55:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e3ec93e-2971-49f0-8bd2-0ea571f15b26","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4a3b9d"}
{"level":"debug","ts":"2026-07-10T02:55:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e3ec93e-2971-49f0-8bd2-0ea571f15b26","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6f537b4e-5bd4-4ee7-b86a-0a4f4773f24c","keyName":"e2e-rate-a-4a3b9d","selected_subscription":"e2e-rate-iso-a-4a3b9d","selected_subscription_key":"ai-tenant-e2e-shared-a-d5b98a/e2e-rate-iso-a-4a3b9d@ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d5b98a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4a3b9d","namespace":"ai-tenant-e2e-shared-a-d5b98a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T02:55:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e3ec93e-2971-49f0-8bd2-0ea571f15b26","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:55:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e3ec93e-2971-49f0-8bd2-0ea571f15b26","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:55:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b4a5c79-4731-4d6c-88fc-0034e79b54b7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:43554","PortSpecifier":{"PortValue":43554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8b4a5c79-4731-4d6c-88fc-0034e79b54b7","method":"POST","path":"/ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a/v1/completions","host":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:55:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b4a5c79-4731-4d6c-88fc-0034e79b54b7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:43554","PortSpecifier":{"PortValue":43554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783652136,"nanos":112700292},"http":{"id":"8b4a5c79-4731-4d6c-88fc-0034e79b54b7","method":"POST","headers":{":authority":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:55:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8b4a5c79-4731-4d6c-88fc-0034e79b54b7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-oCT541FSdx71Z9ZO_88WJU3jU8otcnTP4lmdXkKHWgx9KpCv5aaYuZwymFpo"}
{"level":"debug","ts":"2026-07-10T02:55:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8b4a5c79-4731-4d6c-88fc-0034e79b54b7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-oCT541FSdx71Z9ZO_88WJU3jU8otcnTP4lmdXkKHWgx9KpCv5aaYuZwymFpo\"}"}
{"level":"debug","ts":"2026-07-10T02:55:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8b4a5c79-4731-4d6c-88fc-0034e79b54b7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6f537b4e-5bd4-4ee7-b86a-0a4f4773f24c","keyName":"e2e-rate-a-4a3b9d","subscription":"e2e-rate-iso-a-4a3b9d","tenant":"e2e-shared-a-d5b98a","userId":"6f537b4e-5bd4-4ee7-b86a-0a4f4773f24c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T02:55:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8b4a5c79-4731-4d6c-88fc-0034e79b54b7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a\",\"requestedSubscription\":\"e2e-rate-iso-a-4a3b9d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T02:55:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8b4a5c79-4731-4d6c-88fc-0034e79b54b7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d5b98a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4a3b9d","namespace":"ai-tenant-e2e-shared-a-d5b98a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T02:55:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8b4a5c79-4731-4d6c-88fc-0034e79b54b7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:55:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b4a5c79-4731-4d6c-88fc-0034e79b54b7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b4a5c79-4731-4d6c-88fc-0034e79b54b7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b4a5c79-4731-4d6c-88fc-0034e79b54b7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b4a5c79-4731-4d6c-88fc-0034e79b54b7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b4a5c79-4731-4d6c-88fc-0034e79b54b7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:55:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b4a5c79-4731-4d6c-88fc-0034e79b54b7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T02:55:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b4a5c79-4731-4d6c-88fc-0034e79b54b7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4a3b9d"}
{"level":"debug","ts":"2026-07-10T02:55:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b4a5c79-4731-4d6c-88fc-0034e79b54b7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6f537b4e-5bd4-4ee7-b86a-0a4f4773f24c","keyName":"e2e-rate-a-4a3b9d","selected_subscription":"e2e-rate-iso-a-4a3b9d","selected_subscription_key":"ai-tenant-e2e-shared-a-d5b98a/e2e-rate-iso-a-4a3b9d@ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d5b98a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4a3b9d","namespace":"ai-tenant-e2e-shared-a-d5b98a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T02:55:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b4a5c79-4731-4d6c-88fc-0034e79b54b7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:55:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b4a5c79-4731-4d6c-88fc-0034e79b54b7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:55:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44502398-9887-4cc9-a039-918f877cac2b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:46592","PortSpecifier":{"PortValue":46592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"44502398-9887-4cc9-a039-918f877cac2b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:55:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44502398-9887-4cc9-a039-918f877cac2b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:46592","PortSpecifier":{"PortValue":46592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783652147,"nanos":49932080},"http":{"id":"44502398-9887-4cc9-a039-918f877cac2b","method":"POST","headers":{":authority":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:55:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"44502398-9887-4cc9-a039-918f877cac2b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T02:55:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"44502398-9887-4cc9-a039-918f877cac2b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f57a24c5-3349-4201-bb76-57629a222ea1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ecdb5a27-a9da-408c-8428-a399f0e5aa0e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9f5c3fb617ad"]}}
{"level":"debug","ts":"2026-07-10T02:55:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"44502398-9887-4cc9-a039-918f877cac2b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9f5c3fb617ad"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ecdb5a27-a9da-408c-8428-a399f0e5aa0e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f57a24c5-3349-4201-bb76-57629a222ea1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7b0414b83283b9dac3a6c6ecb0ee13025e9c7f368f0503f8e009e14c2555a374"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:55:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44502398-9887-4cc9-a039-918f877cac2b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44502398-9887-4cc9-a039-918f877cac2b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44502398-9887-4cc9-a039-918f877cac2b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"44502398-9887-4cc9-a039-918f877cac2b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T02:55:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44502398-9887-4cc9-a039-918f877cac2b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:55:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44502398-9887-4cc9-a039-918f877cac2b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T02:55:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44502398-9887-4cc9-a039-918f877cac2b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:55:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44502398-9887-4cc9-a039-918f877cac2b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:55:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af9eb125-1d7d-4c5e-96fb-f5ba34ce9c1d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49636","PortSpecifier":{"PortValue":49636}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"af9eb125-1d7d-4c5e-96fb-f5ba34ce9c1d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-de8279.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:55:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af9eb125-1d7d-4c5e-96fb-f5ba34ce9c1d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49636","PortSpecifier":{"PortValue":49636}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783652147,"nanos":88751066},"http":{"id":"af9eb125-1d7d-4c5e-96fb-f5ba34ce9c1d","method":"POST","headers":{":authority":"e2e-shared-b-de8279.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:55:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"af9eb125-1d7d-4c5e-96fb-f5ba34ce9c1d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T02:55:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"af9eb125-1d7d-4c5e-96fb-f5ba34ce9c1d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f57a24c5-3349-4201-bb76-57629a222ea1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ecdb5a27-a9da-408c-8428-a399f0e5aa0e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9f5c3fb617ad"]}}
{"level":"debug","ts":"2026-07-10T02:55:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"af9eb125-1d7d-4c5e-96fb-f5ba34ce9c1d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9f5c3fb617ad"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ecdb5a27-a9da-408c-8428-a399f0e5aa0e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f57a24c5-3349-4201-bb76-57629a222ea1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"621fe045a7953de468b49b960edeb17ca015e260751e5af80bc07b506b04bc46"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-de8279.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:55:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af9eb125-1d7d-4c5e-96fb-f5ba34ce9c1d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af9eb125-1d7d-4c5e-96fb-f5ba34ce9c1d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af9eb125-1d7d-4c5e-96fb-f5ba34ce9c1d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-de8279/rate-test-model-de8279\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"af9eb125-1d7d-4c5e-96fb-f5ba34ce9c1d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T02:55:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af9eb125-1d7d-4c5e-96fb-f5ba34ce9c1d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:55:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af9eb125-1d7d-4c5e-96fb-f5ba34ce9c1d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T02:55:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af9eb125-1d7d-4c5e-96fb-f5ba34ce9c1d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:55:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af9eb125-1d7d-4c5e-96fb-f5ba34ce9c1d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:55:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"deaa77d2-50cf-4ebc-9452-4cb4e6618ad4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:46598","PortSpecifier":{"PortValue":46598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"deaa77d2-50cf-4ebc-9452-4cb4e6618ad4","method":"POST","path":"/ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a/v1/completions","host":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:55:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"deaa77d2-50cf-4ebc-9452-4cb4e6618ad4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:46598","PortSpecifier":{"PortValue":46598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783652147,"nanos":138542605},"http":{"id":"deaa77d2-50cf-4ebc-9452-4cb4e6618ad4","method":"POST","headers":{":authority":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:55:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"deaa77d2-50cf-4ebc-9452-4cb4e6618ad4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-txRMpcXs7l2RbrKM_Lxq4Pst8PqHgOejjRV8W21jA33HPp6z51cSxK6FOOvY"}
{"level":"debug","ts":"2026-07-10T02:55:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"deaa77d2-50cf-4ebc-9452-4cb4e6618ad4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-txRMpcXs7l2RbrKM_Lxq4Pst8PqHgOejjRV8W21jA33HPp6z51cSxK6FOOvY\"}"}
{"level":"debug","ts":"2026-07-10T02:55:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"deaa77d2-50cf-4ebc-9452-4cb4e6618ad4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1b1db245-647c-4ba7-a9ef-42b31568cf1d","keyName":"e2e-rate-a-837302","subscription":"e2e-rate-iso-a-837302","tenant":"e2e-shared-a-d5b98a","userId":"1b1db245-647c-4ba7-a9ef-42b31568cf1d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T02:55:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"deaa77d2-50cf-4ebc-9452-4cb4e6618ad4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a\",\"requestedSubscription\":\"e2e-rate-iso-a-837302\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T02:55:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"deaa77d2-50cf-4ebc-9452-4cb4e6618ad4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d5b98a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-837302","namespace":"ai-tenant-e2e-shared-a-d5b98a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T02:55:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"deaa77d2-50cf-4ebc-9452-4cb4e6618ad4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:55:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"deaa77d2-50cf-4ebc-9452-4cb4e6618ad4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"deaa77d2-50cf-4ebc-9452-4cb4e6618ad4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"deaa77d2-50cf-4ebc-9452-4cb4e6618ad4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"deaa77d2-50cf-4ebc-9452-4cb4e6618ad4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"deaa77d2-50cf-4ebc-9452-4cb4e6618ad4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-837302"}
{"level":"debug","ts":"2026-07-10T02:55:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"deaa77d2-50cf-4ebc-9452-4cb4e6618ad4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:55:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"deaa77d2-50cf-4ebc-9452-4cb4e6618ad4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T02:55:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"deaa77d2-50cf-4ebc-9452-4cb4e6618ad4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1b1db245-647c-4ba7-a9ef-42b31568cf1d","keyName":"e2e-rate-a-837302","selected_subscription":"e2e-rate-iso-a-837302","selected_subscription_key":"ai-tenant-e2e-shared-a-d5b98a/e2e-rate-iso-a-837302@ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d5b98a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-837302","namespace":"ai-tenant-e2e-shared-a-d5b98a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T02:55:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"deaa77d2-50cf-4ebc-9452-4cb4e6618ad4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:55:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"deaa77d2-50cf-4ebc-9452-4cb4e6618ad4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:55:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"698a71d9-83d7-4b47-ac14-ea5c8a4667cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:46602","PortSpecifier":{"PortValue":46602}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"698a71d9-83d7-4b47-ac14-ea5c8a4667cb","method":"POST","path":"/ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a/v1/completions","host":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:55:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"698a71d9-83d7-4b47-ac14-ea5c8a4667cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:46602","PortSpecifier":{"PortValue":46602}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783652148,"nanos":181999091},"http":{"id":"698a71d9-83d7-4b47-ac14-ea5c8a4667cb","method":"POST","headers":{":authority":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:55:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"698a71d9-83d7-4b47-ac14-ea5c8a4667cb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-txRMpcXs7l2RbrKM_Lxq4Pst8PqHgOejjRV8W21jA33HPp6z51cSxK6FOOvY"}
{"level":"debug","ts":"2026-07-10T02:55:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"698a71d9-83d7-4b47-ac14-ea5c8a4667cb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-txRMpcXs7l2RbrKM_Lxq4Pst8PqHgOejjRV8W21jA33HPp6z51cSxK6FOOvY\"}"}
{"level":"debug","ts":"2026-07-10T02:55:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"698a71d9-83d7-4b47-ac14-ea5c8a4667cb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1b1db245-647c-4ba7-a9ef-42b31568cf1d","keyName":"e2e-rate-a-837302","subscription":"e2e-rate-iso-a-837302","tenant":"e2e-shared-a-d5b98a","userId":"1b1db245-647c-4ba7-a9ef-42b31568cf1d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T02:55:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"698a71d9-83d7-4b47-ac14-ea5c8a4667cb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a\",\"requestedSubscription\":\"e2e-rate-iso-a-837302\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T02:55:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"698a71d9-83d7-4b47-ac14-ea5c8a4667cb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d5b98a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-837302","namespace":"ai-tenant-e2e-shared-a-d5b98a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T02:55:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"698a71d9-83d7-4b47-ac14-ea5c8a4667cb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:55:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"698a71d9-83d7-4b47-ac14-ea5c8a4667cb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"698a71d9-83d7-4b47-ac14-ea5c8a4667cb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"698a71d9-83d7-4b47-ac14-ea5c8a4667cb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"698a71d9-83d7-4b47-ac14-ea5c8a4667cb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"698a71d9-83d7-4b47-ac14-ea5c8a4667cb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T02:55:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"698a71d9-83d7-4b47-ac14-ea5c8a4667cb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:55:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"698a71d9-83d7-4b47-ac14-ea5c8a4667cb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-837302"}
{"level":"debug","ts":"2026-07-10T02:55:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"698a71d9-83d7-4b47-ac14-ea5c8a4667cb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1b1db245-647c-4ba7-a9ef-42b31568cf1d","keyName":"e2e-rate-a-837302","selected_subscription":"e2e-rate-iso-a-837302","selected_subscription_key":"ai-tenant-e2e-shared-a-d5b98a/e2e-rate-iso-a-837302@ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d5b98a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-837302","namespace":"ai-tenant-e2e-shared-a-d5b98a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T02:55:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"698a71d9-83d7-4b47-ac14-ea5c8a4667cb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:55:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"698a71d9-83d7-4b47-ac14-ea5c8a4667cb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:55:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0765825-ce30-459b-b650-1f536c6759cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:46606","PortSpecifier":{"PortValue":46606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a0765825-ce30-459b-b650-1f536c6759cb","method":"POST","path":"/ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a/v1/completions","host":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:55:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0765825-ce30-459b-b650-1f536c6759cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:46606","PortSpecifier":{"PortValue":46606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783652149,"nanos":219593622},"http":{"id":"a0765825-ce30-459b-b650-1f536c6759cb","method":"POST","headers":{":authority":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:55:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a0765825-ce30-459b-b650-1f536c6759cb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-txRMpcXs7l2RbrKM_Lxq4Pst8PqHgOejjRV8W21jA33HPp6z51cSxK6FOOvY"}
{"level":"debug","ts":"2026-07-10T02:55:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a0765825-ce30-459b-b650-1f536c6759cb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-txRMpcXs7l2RbrKM_Lxq4Pst8PqHgOejjRV8W21jA33HPp6z51cSxK6FOOvY\"}"}
{"level":"debug","ts":"2026-07-10T02:55:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a0765825-ce30-459b-b650-1f536c6759cb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1b1db245-647c-4ba7-a9ef-42b31568cf1d","keyName":"e2e-rate-a-837302","subscription":"e2e-rate-iso-a-837302","tenant":"e2e-shared-a-d5b98a","userId":"1b1db245-647c-4ba7-a9ef-42b31568cf1d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T02:55:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a0765825-ce30-459b-b650-1f536c6759cb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a\",\"requestedSubscription\":\"e2e-rate-iso-a-837302\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T02:55:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a0765825-ce30-459b-b650-1f536c6759cb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d5b98a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-837302","namespace":"ai-tenant-e2e-shared-a-d5b98a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T02:55:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a0765825-ce30-459b-b650-1f536c6759cb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:55:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0765825-ce30-459b-b650-1f536c6759cb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0765825-ce30-459b-b650-1f536c6759cb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0765825-ce30-459b-b650-1f536c6759cb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0765825-ce30-459b-b650-1f536c6759cb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0765825-ce30-459b-b650-1f536c6759cb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:55:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0765825-ce30-459b-b650-1f536c6759cb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-837302"}
{"level":"debug","ts":"2026-07-10T02:55:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0765825-ce30-459b-b650-1f536c6759cb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T02:55:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0765825-ce30-459b-b650-1f536c6759cb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1b1db245-647c-4ba7-a9ef-42b31568cf1d","keyName":"e2e-rate-a-837302","selected_subscription":"e2e-rate-iso-a-837302","selected_subscription_key":"ai-tenant-e2e-shared-a-d5b98a/e2e-rate-iso-a-837302@ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d5b98a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-837302","namespace":"ai-tenant-e2e-shared-a-d5b98a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T02:55:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0765825-ce30-459b-b650-1f536c6759cb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:55:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0765825-ce30-459b-b650-1f536c6759cb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:55:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"35e0d926-5fbc-4ad4-846f-c3a2b839fc46","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:46610","PortSpecifier":{"PortValue":46610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"35e0d926-5fbc-4ad4-846f-c3a2b839fc46","method":"POST","path":"/ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a/v1/completions","host":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:55:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"35e0d926-5fbc-4ad4-846f-c3a2b839fc46","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:46610","PortSpecifier":{"PortValue":46610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783652150,"nanos":257433633},"http":{"id":"35e0d926-5fbc-4ad4-846f-c3a2b839fc46","method":"POST","headers":{":authority":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:55:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"35e0d926-5fbc-4ad4-846f-c3a2b839fc46","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-txRMpcXs7l2RbrKM_Lxq4Pst8PqHgOejjRV8W21jA33HPp6z51cSxK6FOOvY"}
{"level":"debug","ts":"2026-07-10T02:55:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"35e0d926-5fbc-4ad4-846f-c3a2b839fc46","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-txRMpcXs7l2RbrKM_Lxq4Pst8PqHgOejjRV8W21jA33HPp6z51cSxK6FOOvY\"}"}
{"level":"debug","ts":"2026-07-10T02:55:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"35e0d926-5fbc-4ad4-846f-c3a2b839fc46","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1b1db245-647c-4ba7-a9ef-42b31568cf1d","keyName":"e2e-rate-a-837302","subscription":"e2e-rate-iso-a-837302","tenant":"e2e-shared-a-d5b98a","userId":"1b1db245-647c-4ba7-a9ef-42b31568cf1d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T02:55:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"35e0d926-5fbc-4ad4-846f-c3a2b839fc46","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a\",\"requestedSubscription\":\"e2e-rate-iso-a-837302\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T02:55:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"35e0d926-5fbc-4ad4-846f-c3a2b839fc46","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d5b98a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-837302","namespace":"ai-tenant-e2e-shared-a-d5b98a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T02:55:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"35e0d926-5fbc-4ad4-846f-c3a2b839fc46","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:55:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35e0d926-5fbc-4ad4-846f-c3a2b839fc46","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35e0d926-5fbc-4ad4-846f-c3a2b839fc46","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35e0d926-5fbc-4ad4-846f-c3a2b839fc46","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35e0d926-5fbc-4ad4-846f-c3a2b839fc46","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35e0d926-5fbc-4ad4-846f-c3a2b839fc46","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:55:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35e0d926-5fbc-4ad4-846f-c3a2b839fc46","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T02:55:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35e0d926-5fbc-4ad4-846f-c3a2b839fc46","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-837302"}
{"level":"debug","ts":"2026-07-10T02:55:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35e0d926-5fbc-4ad4-846f-c3a2b839fc46","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1b1db245-647c-4ba7-a9ef-42b31568cf1d","keyName":"e2e-rate-a-837302","selected_subscription":"e2e-rate-iso-a-837302","selected_subscription_key":"ai-tenant-e2e-shared-a-d5b98a/e2e-rate-iso-a-837302@ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d5b98a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-837302","namespace":"ai-tenant-e2e-shared-a-d5b98a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T02:55:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"35e0d926-5fbc-4ad4-846f-c3a2b839fc46","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:55:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"35e0d926-5fbc-4ad4-846f-c3a2b839fc46","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:55:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a91f05be-d073-4ab4-883d-17d89a6f7f01","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:46620","PortSpecifier":{"PortValue":46620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a91f05be-d073-4ab4-883d-17d89a6f7f01","method":"POST","path":"/ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a/v1/completions","host":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:55:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a91f05be-d073-4ab4-883d-17d89a6f7f01","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:46620","PortSpecifier":{"PortValue":46620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783652151,"nanos":292388483},"http":{"id":"a91f05be-d073-4ab4-883d-17d89a6f7f01","method":"POST","headers":{":authority":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:55:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a91f05be-d073-4ab4-883d-17d89a6f7f01","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-txRMpcXs7l2RbrKM_Lxq4Pst8PqHgOejjRV8W21jA33HPp6z51cSxK6FOOvY"}
{"level":"debug","ts":"2026-07-10T02:55:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a91f05be-d073-4ab4-883d-17d89a6f7f01","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-txRMpcXs7l2RbrKM_Lxq4Pst8PqHgOejjRV8W21jA33HPp6z51cSxK6FOOvY\"}"}
{"level":"debug","ts":"2026-07-10T02:55:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a91f05be-d073-4ab4-883d-17d89a6f7f01","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1b1db245-647c-4ba7-a9ef-42b31568cf1d","keyName":"e2e-rate-a-837302","subscription":"e2e-rate-iso-a-837302","tenant":"e2e-shared-a-d5b98a","userId":"1b1db245-647c-4ba7-a9ef-42b31568cf1d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T02:55:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a91f05be-d073-4ab4-883d-17d89a6f7f01","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a\",\"requestedSubscription\":\"e2e-rate-iso-a-837302\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T02:55:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a91f05be-d073-4ab4-883d-17d89a6f7f01","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d5b98a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-837302","namespace":"ai-tenant-e2e-shared-a-d5b98a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T02:55:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a91f05be-d073-4ab4-883d-17d89a6f7f01","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:55:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a91f05be-d073-4ab4-883d-17d89a6f7f01","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a91f05be-d073-4ab4-883d-17d89a6f7f01","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a91f05be-d073-4ab4-883d-17d89a6f7f01","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a91f05be-d073-4ab4-883d-17d89a6f7f01","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a91f05be-d073-4ab4-883d-17d89a6f7f01","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T02:55:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a91f05be-d073-4ab4-883d-17d89a6f7f01","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-837302"}
{"level":"debug","ts":"2026-07-10T02:55:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a91f05be-d073-4ab4-883d-17d89a6f7f01","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:55:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a91f05be-d073-4ab4-883d-17d89a6f7f01","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1b1db245-647c-4ba7-a9ef-42b31568cf1d","keyName":"e2e-rate-a-837302","selected_subscription":"e2e-rate-iso-a-837302","selected_subscription_key":"ai-tenant-e2e-shared-a-d5b98a/e2e-rate-iso-a-837302@ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d5b98a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-837302","namespace":"ai-tenant-e2e-shared-a-d5b98a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T02:55:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a91f05be-d073-4ab4-883d-17d89a6f7f01","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:55:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a91f05be-d073-4ab4-883d-17d89a6f7f01","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:55:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3c2a8346-85ec-42dc-a949-e61b45bcdcd7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:46628","PortSpecifier":{"PortValue":46628}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3c2a8346-85ec-42dc-a949-e61b45bcdcd7","method":"POST","path":"/ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a/v1/completions","host":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:55:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3c2a8346-85ec-42dc-a949-e61b45bcdcd7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:46628","PortSpecifier":{"PortValue":46628}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783652152,"nanos":331956072},"http":{"id":"3c2a8346-85ec-42dc-a949-e61b45bcdcd7","method":"POST","headers":{":authority":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:55:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3c2a8346-85ec-42dc-a949-e61b45bcdcd7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-txRMpcXs7l2RbrKM_Lxq4Pst8PqHgOejjRV8W21jA33HPp6z51cSxK6FOOvY"}
{"level":"debug","ts":"2026-07-10T02:55:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3c2a8346-85ec-42dc-a949-e61b45bcdcd7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-txRMpcXs7l2RbrKM_Lxq4Pst8PqHgOejjRV8W21jA33HPp6z51cSxK6FOOvY\"}"}
{"level":"debug","ts":"2026-07-10T02:55:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3c2a8346-85ec-42dc-a949-e61b45bcdcd7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1b1db245-647c-4ba7-a9ef-42b31568cf1d","keyName":"e2e-rate-a-837302","subscription":"e2e-rate-iso-a-837302","tenant":"e2e-shared-a-d5b98a","userId":"1b1db245-647c-4ba7-a9ef-42b31568cf1d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T02:55:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3c2a8346-85ec-42dc-a949-e61b45bcdcd7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a\",\"requestedSubscription\":\"e2e-rate-iso-a-837302\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T02:55:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3c2a8346-85ec-42dc-a949-e61b45bcdcd7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d5b98a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-837302","namespace":"ai-tenant-e2e-shared-a-d5b98a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T02:55:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3c2a8346-85ec-42dc-a949-e61b45bcdcd7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:55:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c2a8346-85ec-42dc-a949-e61b45bcdcd7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c2a8346-85ec-42dc-a949-e61b45bcdcd7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c2a8346-85ec-42dc-a949-e61b45bcdcd7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c2a8346-85ec-42dc-a949-e61b45bcdcd7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c2a8346-85ec-42dc-a949-e61b45bcdcd7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-837302"}
{"level":"debug","ts":"2026-07-10T02:55:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c2a8346-85ec-42dc-a949-e61b45bcdcd7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:55:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c2a8346-85ec-42dc-a949-e61b45bcdcd7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T02:55:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c2a8346-85ec-42dc-a949-e61b45bcdcd7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1b1db245-647c-4ba7-a9ef-42b31568cf1d","keyName":"e2e-rate-a-837302","selected_subscription":"e2e-rate-iso-a-837302","selected_subscription_key":"ai-tenant-e2e-shared-a-d5b98a/e2e-rate-iso-a-837302@ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d5b98a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-837302","namespace":"ai-tenant-e2e-shared-a-d5b98a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T02:55:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3c2a8346-85ec-42dc-a949-e61b45bcdcd7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:55:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3c2a8346-85ec-42dc-a949-e61b45bcdcd7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:55:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06209a84-9b86-9dc7-a8e6-8adfceba6a9f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:46642","PortSpecifier":{"PortValue":46642}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"06209a84-9b86-9dc7-a8e6-8adfceba6a9f","method":"POST","path":"/ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a/v1/completions","host":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:55:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06209a84-9b86-9dc7-a8e6-8adfceba6a9f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:46642","PortSpecifier":{"PortValue":46642}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783652153,"nanos":366476574},"http":{"id":"06209a84-9b86-9dc7-a8e6-8adfceba6a9f","method":"POST","headers":{":authority":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:55:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"06209a84-9b86-9dc7-a8e6-8adfceba6a9f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-txRMpcXs7l2RbrKM_Lxq4Pst8PqHgOejjRV8W21jA33HPp6z51cSxK6FOOvY"}
{"level":"debug","ts":"2026-07-10T02:55:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"06209a84-9b86-9dc7-a8e6-8adfceba6a9f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-txRMpcXs7l2RbrKM_Lxq4Pst8PqHgOejjRV8W21jA33HPp6z51cSxK6FOOvY\"}"}
{"level":"debug","ts":"2026-07-10T02:55:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"06209a84-9b86-9dc7-a8e6-8adfceba6a9f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1b1db245-647c-4ba7-a9ef-42b31568cf1d","keyName":"e2e-rate-a-837302","subscription":"e2e-rate-iso-a-837302","tenant":"e2e-shared-a-d5b98a","userId":"1b1db245-647c-4ba7-a9ef-42b31568cf1d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T02:55:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"06209a84-9b86-9dc7-a8e6-8adfceba6a9f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a\",\"requestedSubscription\":\"e2e-rate-iso-a-837302\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T02:55:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"06209a84-9b86-9dc7-a8e6-8adfceba6a9f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d5b98a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-837302","namespace":"ai-tenant-e2e-shared-a-d5b98a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T02:55:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"06209a84-9b86-9dc7-a8e6-8adfceba6a9f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:55:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06209a84-9b86-9dc7-a8e6-8adfceba6a9f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06209a84-9b86-9dc7-a8e6-8adfceba6a9f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06209a84-9b86-9dc7-a8e6-8adfceba6a9f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06209a84-9b86-9dc7-a8e6-8adfceba6a9f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06209a84-9b86-9dc7-a8e6-8adfceba6a9f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:55:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06209a84-9b86-9dc7-a8e6-8adfceba6a9f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T02:55:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06209a84-9b86-9dc7-a8e6-8adfceba6a9f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-837302"}
{"level":"debug","ts":"2026-07-10T02:55:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06209a84-9b86-9dc7-a8e6-8adfceba6a9f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1b1db245-647c-4ba7-a9ef-42b31568cf1d","keyName":"e2e-rate-a-837302","selected_subscription":"e2e-rate-iso-a-837302","selected_subscription_key":"ai-tenant-e2e-shared-a-d5b98a/e2e-rate-iso-a-837302@ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d5b98a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-837302","namespace":"ai-tenant-e2e-shared-a-d5b98a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T02:55:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06209a84-9b86-9dc7-a8e6-8adfceba6a9f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:55:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06209a84-9b86-9dc7-a8e6-8adfceba6a9f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:55:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"64eb7a57-93a3-4f9c-bead-127510b5a672","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:46656","PortSpecifier":{"PortValue":46656}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"64eb7a57-93a3-4f9c-bead-127510b5a672","method":"POST","path":"/ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a/v1/completions","host":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:55:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"64eb7a57-93a3-4f9c-bead-127510b5a672","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:46656","PortSpecifier":{"PortValue":46656}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783652154,"nanos":402494323},"http":{"id":"64eb7a57-93a3-4f9c-bead-127510b5a672","method":"POST","headers":{":authority":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:55:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"64eb7a57-93a3-4f9c-bead-127510b5a672","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-txRMpcXs7l2RbrKM_Lxq4Pst8PqHgOejjRV8W21jA33HPp6z51cSxK6FOOvY"}
{"level":"debug","ts":"2026-07-10T02:55:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"64eb7a57-93a3-4f9c-bead-127510b5a672","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-txRMpcXs7l2RbrKM_Lxq4Pst8PqHgOejjRV8W21jA33HPp6z51cSxK6FOOvY\"}"}
{"level":"debug","ts":"2026-07-10T02:55:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"64eb7a57-93a3-4f9c-bead-127510b5a672","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1b1db245-647c-4ba7-a9ef-42b31568cf1d","keyName":"e2e-rate-a-837302","subscription":"e2e-rate-iso-a-837302","tenant":"e2e-shared-a-d5b98a","userId":"1b1db245-647c-4ba7-a9ef-42b31568cf1d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T02:55:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"64eb7a57-93a3-4f9c-bead-127510b5a672","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a\",\"requestedSubscription\":\"e2e-rate-iso-a-837302\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T02:55:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"64eb7a57-93a3-4f9c-bead-127510b5a672","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d5b98a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-837302","namespace":"ai-tenant-e2e-shared-a-d5b98a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T02:55:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"64eb7a57-93a3-4f9c-bead-127510b5a672","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:55:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64eb7a57-93a3-4f9c-bead-127510b5a672","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64eb7a57-93a3-4f9c-bead-127510b5a672","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64eb7a57-93a3-4f9c-bead-127510b5a672","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64eb7a57-93a3-4f9c-bead-127510b5a672","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64eb7a57-93a3-4f9c-bead-127510b5a672","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:55:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64eb7a57-93a3-4f9c-bead-127510b5a672","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T02:55:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64eb7a57-93a3-4f9c-bead-127510b5a672","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-837302"}
{"level":"debug","ts":"2026-07-10T02:55:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64eb7a57-93a3-4f9c-bead-127510b5a672","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1b1db245-647c-4ba7-a9ef-42b31568cf1d","keyName":"e2e-rate-a-837302","selected_subscription":"e2e-rate-iso-a-837302","selected_subscription_key":"ai-tenant-e2e-shared-a-d5b98a/e2e-rate-iso-a-837302@ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d5b98a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-837302","namespace":"ai-tenant-e2e-shared-a-d5b98a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T02:55:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"64eb7a57-93a3-4f9c-bead-127510b5a672","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:55:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"64eb7a57-93a3-4f9c-bead-127510b5a672","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:55:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1bfb2c14-3b9f-4edd-99ed-fd743f62adbb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:46666","PortSpecifier":{"PortValue":46666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1bfb2c14-3b9f-4edd-99ed-fd743f62adbb","method":"POST","path":"/ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a/v1/completions","host":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:55:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1bfb2c14-3b9f-4edd-99ed-fd743f62adbb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:46666","PortSpecifier":{"PortValue":46666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783652155,"nanos":441209010},"http":{"id":"1bfb2c14-3b9f-4edd-99ed-fd743f62adbb","method":"POST","headers":{":authority":"e2e-shared-a-d5b98a.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:55:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1bfb2c14-3b9f-4edd-99ed-fd743f62adbb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-txRMpcXs7l2RbrKM_Lxq4Pst8PqHgOejjRV8W21jA33HPp6z51cSxK6FOOvY"}
{"level":"debug","ts":"2026-07-10T02:55:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1bfb2c14-3b9f-4edd-99ed-fd743f62adbb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-txRMpcXs7l2RbrKM_Lxq4Pst8PqHgOejjRV8W21jA33HPp6z51cSxK6FOOvY\"}"}
{"level":"debug","ts":"2026-07-10T02:55:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1bfb2c14-3b9f-4edd-99ed-fd743f62adbb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1b1db245-647c-4ba7-a9ef-42b31568cf1d","keyName":"e2e-rate-a-837302","subscription":"e2e-rate-iso-a-837302","tenant":"e2e-shared-a-d5b98a","userId":"1b1db245-647c-4ba7-a9ef-42b31568cf1d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T02:55:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1bfb2c14-3b9f-4edd-99ed-fd743f62adbb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a\",\"requestedSubscription\":\"e2e-rate-iso-a-837302\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T02:55:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1bfb2c14-3b9f-4edd-99ed-fd743f62adbb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b98a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d5b98a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-837302","namespace":"ai-tenant-e2e-shared-a-d5b98a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T02:55:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1bfb2c14-3b9f-4edd-99ed-fd743f62adbb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:55:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1bfb2c14-3b9f-4edd-99ed-fd743f62adbb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1bfb2c14-3b9f-4edd-99ed-fd743f62adbb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1bfb2c14-3b9f-4edd-99ed-fd743f62adbb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1bfb2c14-3b9f-4edd-99ed-fd743f62adbb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1bfb2c14-3b9f-4edd-99ed-fd743f62adbb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:55:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1bfb2c14-3b9f-4edd-99ed-fd743f62adbb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-837302"}
{"level":"debug","ts":"2026-07-10T02:55:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1bfb2c14-3b9f-4edd-99ed-fd743f62adbb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T02:55:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1bfb2c14-3b9f-4edd-99ed-fd743f62adbb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1b1db245-647c-4ba7-a9ef-42b31568cf1d","keyName":"e2e-rate-a-837302","selected_subscription":"e2e-rate-iso-a-837302","selected_subscription_key":"ai-tenant-e2e-shared-a-d5b98a/e2e-rate-iso-a-837302@ai-tenant-e2e-shared-a-d5b98a/rate-test-model-d5b98a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d5b98a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-837302","namespace":"ai-tenant-e2e-shared-a-d5b98a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T02:55:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1bfb2c14-3b9f-4edd-99ed-fd743f62adbb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:55:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1bfb2c14-3b9f-4edd-99ed-fd743f62adbb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:55:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"025e0634-a68d-4573-8dad-4b08912a1def","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49644","PortSpecifier":{"PortValue":49644}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"025e0634-a68d-4573-8dad-4b08912a1def","method":"POST","path":"/ai-tenant-e2e-shared-b-de8279/rate-test-model-de8279/v1/completions","host":"e2e-shared-b-de8279.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:55:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"025e0634-a68d-4573-8dad-4b08912a1def","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49644","PortSpecifier":{"PortValue":49644}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783652155,"nanos":476587522},"http":{"id":"025e0634-a68d-4573-8dad-4b08912a1def","method":"POST","headers":{":authority":"e2e-shared-b-de8279.apps.0c3a1b80-7065-4d35-a30e-9f5c3fb617ad.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-de8279/rate-test-model-de8279/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:55:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"025e0634-a68d-4573-8dad-4b08912a1def","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-U9Ds1TJPgdxXBU0y_horaRV7jXnnz2hJb6Izh4edu0doK9w7s5ZFFYd6Ptgq"}
{"level":"debug","ts":"2026-07-10T02:55:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"025e0634-a68d-4573-8dad-4b08912a1def","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-de8279.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-U9Ds1TJPgdxXBU0y_horaRV7jXnnz2hJb6Izh4edu0doK9w7s5ZFFYd6Ptgq\"}"}
{"level":"debug","ts":"2026-07-10T02:55:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"025e0634-a68d-4573-8dad-4b08912a1def","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-de8279.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cd1bc21f-88c6-4576-aa06-e291b8228dd6","keyName":"e2e-rate-b-837302","subscription":"e2e-rate-iso-b-837302","tenant":"e2e-shared-b-de8279","userId":"cd1bc21f-88c6-4576-aa06-e291b8228dd6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T02:55:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"025e0634-a68d-4573-8dad-4b08912a1def","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-de8279.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-de8279/rate-test-model-de8279\",\"requestedSubscription\":\"e2e-rate-iso-b-837302\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T02:55:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"025e0634-a68d-4573-8dad-4b08912a1def","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-de8279.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-de8279","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-837302","namespace":"ai-tenant-e2e-shared-b-de8279","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T02:55:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"025e0634-a68d-4573-8dad-4b08912a1def","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T02:55:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"025e0634-a68d-4573-8dad-4b08912a1def","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"025e0634-a68d-4573-8dad-4b08912a1def","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"025e0634-a68d-4573-8dad-4b08912a1def","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-de8279/rate-test-model-de8279\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"025e0634-a68d-4573-8dad-4b08912a1def","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:55:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"025e0634-a68d-4573-8dad-4b08912a1def","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T02:55:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"025e0634-a68d-4573-8dad-4b08912a1def","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:55:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"025e0634-a68d-4573-8dad-4b08912a1def","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-837302"}
{"level":"debug","ts":"2026-07-10T02:55:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"025e0634-a68d-4573-8dad-4b08912a1def","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cd1bc21f-88c6-4576-aa06-e291b8228dd6","keyName":"e2e-rate-b-837302","selected_subscription":"e2e-rate-iso-b-837302","selected_subscription_key":"ai-tenant-e2e-shared-b-de8279/e2e-rate-iso-b-837302@ai-tenant-e2e-shared-b-de8279/rate-test-model-de8279","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-de8279","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-837302","namespace":"ai-tenant-e2e-shared-b-de8279","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T02:55:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"025e0634-a68d-4573-8dad-4b08912a1def","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:55:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"025e0634-a68d-4573-8dad-4b08912a1def","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:56:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b7c2cbe281a2440d00243b66c4ecac694ab5560b1c85cce55161d8b93a78e0cd"}
{"level":"info","ts":"2026-07-10T02:56:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8653136b2ad2ac8d360ad6edca9a3bd813229678d8d4c0c2ba689c61b83c786e"}
{"level":"info","ts":"2026-07-10T02:56:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d2157b5d1e8ca477f7c65054b59dab526858089433f22a7f4d4de0f402b57044"}
{"level":"info","ts":"2026-07-10T02:56:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd6e21d33dd82db32b3b9418c437698d2415e1c42f30f6ff97deab296d24b234"}
{"level":"info","ts":"2026-07-10T02:56:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2854b265d3713a18458f4c70d004ee7a904e1079143273399db34bf255b5fbd8"}
{"level":"info","ts":"2026-07-10T02:56:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/29b29da7a2ad0e1121f6263a3949966701d8f40f6e4c62c0d0354d58d2c3271a"}
{"level":"info","ts":"2026-07-10T02:56:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a27cf88b291472af5c4428c9cab94828fb02317d9afd288122c0631bb591a274"}
{"level":"info","ts":"2026-07-10T02:56:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c4255aea4e1db8efd1f68fd736c93cad1c93df447348f3e5c14dbb6c41a5de8e"}
{"level":"info","ts":"2026-07-10T02:56:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b240d1171784846d4fe46a5c503fb77b990915cef9a4d1e6405f9e6cec17855e"}
{"level":"info","ts":"2026-07-10T02:56:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2911975eda36b6ef52d68765a70fc00ee031d3913c0641bae89338cf2fb2d859"}
{"level":"info","ts":"2026-07-10T02:56:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/30ed6fc50b7e0098023cdbe69dd0ef71647761004aa123ddd5678349a7f7ff77"}
{"level":"info","ts":"2026-07-10T02:56:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/367fb2dd41d44c1f8b8bba7560bd4a01103df781a8002c670be23938bc43f099"}
{"level":"info","ts":"2026-07-10T02:56:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ac3972ecb318117c8f4f31a381356dc9b78f3230f715c9371fc0e0e7940a3153"}
{"level":"info","ts":"2026-07-10T02:56:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16042a4540bd3350fa746c839df0bd588e2fd961f1752bd6e1c3d8bbaafb2988"}
{"level":"info","ts":"2026-07-10T02:56:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2063d7a1a7305859efa6862cba2058350d6c1d1d1997559c57dddd8b2e9bf6e5"}
{"level":"info","ts":"2026-07-10T02:56:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab8dcdf999e749e710c1e7a5a686ae4956ba4999a675814cdae1915e271bdcd1"}
{"level":"info","ts":"2026-07-10T02:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/28b2f0654b968a4dcfd05bc712bab908defd9fa17263304883653474c9a65e88"}
{"level":"info","ts":"2026-07-10T02:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b0414b83283b9dac3a6c6ecb0ee13025e9c7f368f0503f8e009e14c2555a374"}
{"level":"info","ts":"2026-07-10T02:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6af47e9fafd401a33f51d18eb1020d6188508703bd1af990e7fe908a257745fd"}
{"level":"info","ts":"2026-07-10T02:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0cb90f8d2e82a6fc77528c5a52afed9d64b11e46b2a9a265d52a24e47119fdfa"}
{"level":"info","ts":"2026-07-10T02:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/707f119cecb60316a9e2712014924194bd19c0409d7d9d67cbba125818f9e572"}
{"level":"info","ts":"2026-07-10T02:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f7b89c32f9bc07301546f54eaf9b62ca64f8f17727d26774ecd575f465d054c"}
{"level":"info","ts":"2026-07-10T02:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/621fe045a7953de468b49b960edeb17ca015e260751e5af80bc07b506b04bc46"}
{"level":"info","ts":"2026-07-10T02:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/13031bb16d04f6ebbf3399e33ab04943fa34a8f6cb55f41c48ec741b32d37691"}