--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-22T04:14:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:14:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:14:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21"}
{"level":"info","ts":"2026-07-22T04:14:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd"}
{"level":"info","ts":"2026-07-22T04:14:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:14:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:14:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e"}
{"level":"info","ts":"2026-07-22T04:14:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:14:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:14:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21"}
{"level":"info","ts":"2026-07-22T04:14:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd"}
{"level":"info","ts":"2026-07-22T04:14:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:14:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:14:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21"}
{"level":"info","ts":"2026-07-22T04:14:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:14:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:14:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd"}
{"level":"info","ts":"2026-07-22T04:14:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd"}
{"level":"info","ts":"2026-07-22T04:14:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21"}
{"level":"info","ts":"2026-07-22T04:14:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:14:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:14:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd"}
{"level":"info","ts":"2026-07-22T04:14:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:14:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:14:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd"}
{"level":"error","ts":"2026-07-22T04:14:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T04:14:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:14:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44fc30d5-b10a-48a4-b7a3-2cef76863886","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48662","PortSpecifier":{"PortValue":48662}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"44fc30d5-b10a-48a4-b7a3-2cef76863886","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T04:14:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44fc30d5-b10a-48a4-b7a3-2cef76863886","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48662","PortSpecifier":{"PortValue":48662}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784693665,"nanos":207997100},"http":{"id":"44fc30d5-b10a-48a4-b7a3-2cef76863886","method":"POST","headers":{":authority":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:14:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"44fc30d5-b10a-48a4-b7a3-2cef76863886","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T04:14:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"44fc30d5-b10a-48a4-b7a3-2cef76863886","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"88d523f6-2b3e-4966-9ce1-debf8be3a1cf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=eaea3edd-9c76-456b-b6f4-85607b8e9c74"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e824959af2ef"]}}
{"level":"debug","ts":"2026-07-22T04:14:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"44fc30d5-b10a-48a4-b7a3-2cef76863886","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e824959af2ef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eaea3edd-9c76-456b-b6f4-85607b8e9c74"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"88d523f6-2b3e-4966-9ce1-debf8be3a1cf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"576145c34970595258c11ed536f327904a340d543c0f2941856d51ef0549a993"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:14:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44fc30d5-b10a-48a4-b7a3-2cef76863886","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:14:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44fc30d5-b10a-48a4-b7a3-2cef76863886","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:14:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44fc30d5-b10a-48a4-b7a3-2cef76863886","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-dd1671/auth-test-model-dd1671\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-dd1671/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:14:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"44fc30d5-b10a-48a4-b7a3-2cef76863886","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T04:14:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44fc30d5-b10a-48a4-b7a3-2cef76863886","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T04:14:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44fc30d5-b10a-48a4-b7a3-2cef76863886","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-22T04:14:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44fc30d5-b10a-48a4-b7a3-2cef76863886","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T04:14:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44fc30d5-b10a-48a4-b7a3-2cef76863886","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T04:14:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3caac4e4-527e-4b94-b39b-ed4a5553c9fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42988","PortSpecifier":{"PortValue":42988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3caac4e4-527e-4b94-b39b-ed4a5553c9fb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-38610b.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T04:14:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3caac4e4-527e-4b94-b39b-ed4a5553c9fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42988","PortSpecifier":{"PortValue":42988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784693665,"nanos":265126397},"http":{"id":"3caac4e4-527e-4b94-b39b-ed4a5553c9fb","method":"POST","headers":{":authority":"e2e-shared-b-38610b.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:14:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3caac4e4-527e-4b94-b39b-ed4a5553c9fb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T04:14:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3caac4e4-527e-4b94-b39b-ed4a5553c9fb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"88d523f6-2b3e-4966-9ce1-debf8be3a1cf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=eaea3edd-9c76-456b-b6f4-85607b8e9c74"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e824959af2ef"]}}
{"level":"debug","ts":"2026-07-22T04:14:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3caac4e4-527e-4b94-b39b-ed4a5553c9fb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e824959af2ef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eaea3edd-9c76-456b-b6f4-85607b8e9c74"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"88d523f6-2b3e-4966-9ce1-debf8be3a1cf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-38610b.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:14:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3caac4e4-527e-4b94-b39b-ed4a5553c9fb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:14:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3caac4e4-527e-4b94-b39b-ed4a5553c9fb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:14:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3caac4e4-527e-4b94-b39b-ed4a5553c9fb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-38610b/auth-test-model-38610b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-38610b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:14:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3caac4e4-527e-4b94-b39b-ed4a5553c9fb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T04:14:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3caac4e4-527e-4b94-b39b-ed4a5553c9fb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T04:14:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3caac4e4-527e-4b94-b39b-ed4a5553c9fb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T04:14:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3caac4e4-527e-4b94-b39b-ed4a5553c9fb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T04:14:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3caac4e4-527e-4b94-b39b-ed4a5553c9fb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T04:14:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9a92adf-552a-4c61-9447-5ced5141fd40","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42990","PortSpecifier":{"PortValue":42990}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e9a92adf-552a-4c61-9447-5ced5141fd40","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-38610b.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T04:14:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9a92adf-552a-4c61-9447-5ced5141fd40","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42990","PortSpecifier":{"PortValue":42990}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784693665,"nanos":302994755},"http":{"id":"e9a92adf-552a-4c61-9447-5ced5141fd40","method":"GET","headers":{":authority":"e2e-shared-b-38610b.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:14:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e9a92adf-552a-4c61-9447-5ced5141fd40","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1MGz1ZJylWSefQc44_4xeJDJyTnKfTF16O7Y0r7X9dMgfpq12WmyE1tRAEiHW"}
{"level":"debug","ts":"2026-07-22T04:14:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e9a92adf-552a-4c61-9447-5ced5141fd40","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-38610b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1MGz1ZJylWSefQc44_4xeJDJyTnKfTF16O7Y0r7X9dMgfpq12WmyE1tRAEiHW\"}"}
{"level":"debug","ts":"2026-07-22T04:14:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e9a92adf-552a-4c61-9447-5ced5141fd40","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-38610b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-22T04:14:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e9a92adf-552a-4c61-9447-5ced5141fd40","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-38610b.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:14:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9a92adf-552a-4c61-9447-5ced5141fd40","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:14:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"e9a92adf-552a-4c61-9447-5ced5141fd40","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-22T04:14:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9a92adf-552a-4c61-9447-5ced5141fd40","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-22T04:14:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9a92adf-552a-4c61-9447-5ced5141fd40","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-22T04:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16"}
{"level":"info","ts":"2026-07-22T04:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d"}
{"level":"info","ts":"2026-07-22T04:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924"}
{"level":"info","ts":"2026-07-22T04:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e"}
{"level":"info","ts":"2026-07-22T04:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7"}
{"level":"info","ts":"2026-07-22T04:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd"}
{"level":"info","ts":"2026-07-22T04:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b59a240319d6d86cad0bef800632857bcfea9e4018d1354841aea45de7c5b67"}
{"level":"info","ts":"2026-07-22T04:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/519f777f9a05d0ea4fd9c14f0d524ea706083dc950bcee8d30345860da4bcf2c"}
{"level":"info","ts":"2026-07-22T04:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21"}
{"level":"info","ts":"2026-07-22T04:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6997f8e64a6da85ff2b2ae8538d8fcb415a3d8c3bc57a511029e61badad99b19"}
{"level":"info","ts":"2026-07-22T04:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a"}
{"level":"info","ts":"2026-07-22T04:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324"}
{"level":"debug","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16"}
{"level":"info","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16"}
{"level":"debug","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:14:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:14:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16"}
{"level":"debug","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16"}
{"level":"debug","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:14:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:14:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16"}
{"level":"debug","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16"}
{"level":"debug","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:14:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:14:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16"}
{"level":"info","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:14:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:14:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a"}
{"level":"info","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:14:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:14:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16"}
{"level":"info","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a"}
{"level":"debug","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:14:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:14:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16"}
{"level":"debug","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a"}
{"level":"debug","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a"}
{"level":"debug","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:14:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:14:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a"}
{"level":"debug","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e"}
{"level":"debug","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e"}
{"level":"debug","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:14:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:14:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e"}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7"}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7"}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7"}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21"}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21"}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21"}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b59a240319d6d86cad0bef800632857bcfea9e4018d1354841aea45de7c5b67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b59a240319d6d86cad0bef800632857bcfea9e4018d1354841aea45de7c5b67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b59a240319d6d86cad0bef800632857bcfea9e4018d1354841aea45de7c5b67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b59a240319d6d86cad0bef800632857bcfea9e4018d1354841aea45de7c5b67"}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b59a240319d6d86cad0bef800632857bcfea9e4018d1354841aea45de7c5b67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b59a240319d6d86cad0bef800632857bcfea9e4018d1354841aea45de7c5b67"}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b59a240319d6d86cad0bef800632857bcfea9e4018d1354841aea45de7c5b67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b59a240319d6d86cad0bef800632857bcfea9e4018d1354841aea45de7c5b67","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b59a240319d6d86cad0bef800632857bcfea9e4018d1354841aea45de7c5b67"}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"519f777f9a05d0ea4fd9c14f0d524ea706083dc950bcee8d30345860da4bcf2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21"}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"519f777f9a05d0ea4fd9c14f0d524ea706083dc950bcee8d30345860da4bcf2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b59a240319d6d86cad0bef800632857bcfea9e4018d1354841aea45de7c5b67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b59a240319d6d86cad0bef800632857bcfea9e4018d1354841aea45de7c5b67"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b59a240319d6d86cad0bef800632857bcfea9e4018d1354841aea45de7c5b67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"519f777f9a05d0ea4fd9c14f0d524ea706083dc950bcee8d30345860da4bcf2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"519f777f9a05d0ea4fd9c14f0d524ea706083dc950bcee8d30345860da4bcf2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b59a240319d6d86cad0bef800632857bcfea9e4018d1354841aea45de7c5b67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"519f777f9a05d0ea4fd9c14f0d524ea706083dc950bcee8d30345860da4bcf2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"519f777f9a05d0ea4fd9c14f0d524ea706083dc950bcee8d30345860da4bcf2c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/519f777f9a05d0ea4fd9c14f0d524ea706083dc950bcee8d30345860da4bcf2c"}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b59a240319d6d86cad0bef800632857bcfea9e4018d1354841aea45de7c5b67"}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"519f777f9a05d0ea4fd9c14f0d524ea706083dc950bcee8d30345860da4bcf2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/519f777f9a05d0ea4fd9c14f0d524ea706083dc950bcee8d30345860da4bcf2c"}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd"}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324"}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd"}
{"level":"error","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324"}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"519f777f9a05d0ea4fd9c14f0d524ea706083dc950bcee8d30345860da4bcf2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["519f777f9a05d0ea4fd9c14f0d524ea706083dc950bcee8d30345860da4bcf2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd"}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"519f777f9a05d0ea4fd9c14f0d524ea706083dc950bcee8d30345860da4bcf2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"519f777f9a05d0ea4fd9c14f0d524ea706083dc950bcee8d30345860da4bcf2c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324"}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/519f777f9a05d0ea4fd9c14f0d524ea706083dc950bcee8d30345860da4bcf2c"}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324"}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324"}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d"}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324"}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d"}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324"}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324"}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924"}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d"}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324"}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6997f8e64a6da85ff2b2ae8538d8fcb415a3d8c3bc57a511029e61badad99b19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924"}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6997f8e64a6da85ff2b2ae8538d8fcb415a3d8c3bc57a511029e61badad99b19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6997f8e64a6da85ff2b2ae8538d8fcb415a3d8c3bc57a511029e61badad99b19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6997f8e64a6da85ff2b2ae8538d8fcb415a3d8c3bc57a511029e61badad99b19","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324"}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6997f8e64a6da85ff2b2ae8538d8fcb415a3d8c3bc57a511029e61badad99b19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6997f8e64a6da85ff2b2ae8538d8fcb415a3d8c3bc57a511029e61badad99b19"}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6997f8e64a6da85ff2b2ae8538d8fcb415a3d8c3bc57a511029e61badad99b19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6997f8e64a6da85ff2b2ae8538d8fcb415a3d8c3bc57a511029e61badad99b19","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6997f8e64a6da85ff2b2ae8538d8fcb415a3d8c3bc57a511029e61badad99b19"}
{"level":"debug","ts":"2026-07-22T04:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6997f8e64a6da85ff2b2ae8538d8fcb415a3d8c3bc57a511029e61badad99b19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:14:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:14:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6997f8e64a6da85ff2b2ae8538d8fcb415a3d8c3bc57a511029e61badad99b19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6997f8e64a6da85ff2b2ae8538d8fcb415a3d8c3bc57a511029e61badad99b19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6997f8e64a6da85ff2b2ae8538d8fcb415a3d8c3bc57a511029e61badad99b19","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6997f8e64a6da85ff2b2ae8538d8fcb415a3d8c3bc57a511029e61badad99b19"}
{"level":"info","ts":"2026-07-22T04:14:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6ce3b6a-f38b-4c7c-8161-96fa073bb356","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59672","PortSpecifier":{"PortValue":59672}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a6ce3b6a-f38b-4c7c-8161-96fa073bb356","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T04:14:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6ce3b6a-f38b-4c7c-8161-96fa073bb356","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59672","PortSpecifier":{"PortValue":59672}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784693682,"nanos":417842833},"http":{"id":"a6ce3b6a-f38b-4c7c-8161-96fa073bb356","method":"POST","headers":{":authority":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:14:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a6ce3b6a-f38b-4c7c-8161-96fa073bb356","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T04:14:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a6ce3b6a-f38b-4c7c-8161-96fa073bb356","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"88d523f6-2b3e-4966-9ce1-debf8be3a1cf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=eaea3edd-9c76-456b-b6f4-85607b8e9c74"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e824959af2ef"]}}
{"level":"debug","ts":"2026-07-22T04:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a6ce3b6a-f38b-4c7c-8161-96fa073bb356","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e824959af2ef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eaea3edd-9c76-456b-b6f4-85607b8e9c74"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"88d523f6-2b3e-4966-9ce1-debf8be3a1cf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"576145c34970595258c11ed536f327904a340d543c0f2941856d51ef0549a993"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6ce3b6a-f38b-4c7c-8161-96fa073bb356","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6ce3b6a-f38b-4c7c-8161-96fa073bb356","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6ce3b6a-f38b-4c7c-8161-96fa073bb356","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-dd1671/auth-test-model-dd1671\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-dd1671/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:14:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a6ce3b6a-f38b-4c7c-8161-96fa073bb356","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T04:14:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6ce3b6a-f38b-4c7c-8161-96fa073bb356","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T04:14:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6ce3b6a-f38b-4c7c-8161-96fa073bb356","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T04:14:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6ce3b6a-f38b-4c7c-8161-96fa073bb356","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T04:14:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6ce3b6a-f38b-4c7c-8161-96fa073bb356","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T04:14:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8405801a-f20b-41da-b052-3d86b75bd6a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60428","PortSpecifier":{"PortValue":60428}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8405801a-f20b-41da-b052-3d86b75bd6a0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-38610b.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T04:14:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8405801a-f20b-41da-b052-3d86b75bd6a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60428","PortSpecifier":{"PortValue":60428}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784693682,"nanos":451401959},"http":{"id":"8405801a-f20b-41da-b052-3d86b75bd6a0","method":"POST","headers":{":authority":"e2e-shared-b-38610b.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:14:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8405801a-f20b-41da-b052-3d86b75bd6a0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T04:14:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8405801a-f20b-41da-b052-3d86b75bd6a0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"88d523f6-2b3e-4966-9ce1-debf8be3a1cf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=eaea3edd-9c76-456b-b6f4-85607b8e9c74"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e824959af2ef"]}}
{"level":"debug","ts":"2026-07-22T04:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8405801a-f20b-41da-b052-3d86b75bd6a0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e824959af2ef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eaea3edd-9c76-456b-b6f4-85607b8e9c74"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"88d523f6-2b3e-4966-9ce1-debf8be3a1cf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-38610b.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8405801a-f20b-41da-b052-3d86b75bd6a0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8405801a-f20b-41da-b052-3d86b75bd6a0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8405801a-f20b-41da-b052-3d86b75bd6a0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-38610b/auth-test-model-38610b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-38610b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:14:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8405801a-f20b-41da-b052-3d86b75bd6a0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T04:14:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8405801a-f20b-41da-b052-3d86b75bd6a0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T04:14:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8405801a-f20b-41da-b052-3d86b75bd6a0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-22T04:14:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8405801a-f20b-41da-b052-3d86b75bd6a0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T04:14:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8405801a-f20b-41da-b052-3d86b75bd6a0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T04:14:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1707c8b4-ac7e-42ed-a77a-9bb987298722","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59676","PortSpecifier":{"PortValue":59676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1707c8b4-ac7e-42ed-a77a-9bb987298722","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T04:14:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1707c8b4-ac7e-42ed-a77a-9bb987298722","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59676","PortSpecifier":{"PortValue":59676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784693682,"nanos":493114178},"http":{"id":"1707c8b4-ac7e-42ed-a77a-9bb987298722","method":"POST","headers":{":authority":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:14:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1707c8b4-ac7e-42ed-a77a-9bb987298722","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T04:14:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1707c8b4-ac7e-42ed-a77a-9bb987298722","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"88d523f6-2b3e-4966-9ce1-debf8be3a1cf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=eaea3edd-9c76-456b-b6f4-85607b8e9c74"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e824959af2ef"]}}
{"level":"debug","ts":"2026-07-22T04:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1707c8b4-ac7e-42ed-a77a-9bb987298722","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e824959af2ef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eaea3edd-9c76-456b-b6f4-85607b8e9c74"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"88d523f6-2b3e-4966-9ce1-debf8be3a1cf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"576145c34970595258c11ed536f327904a340d543c0f2941856d51ef0549a993"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1707c8b4-ac7e-42ed-a77a-9bb987298722","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1707c8b4-ac7e-42ed-a77a-9bb987298722","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-dd1671/auth-test-model-dd1671\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-dd1671/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1707c8b4-ac7e-42ed-a77a-9bb987298722","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:14:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1707c8b4-ac7e-42ed-a77a-9bb987298722","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T04:14:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1707c8b4-ac7e-42ed-a77a-9bb987298722","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T04:14:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1707c8b4-ac7e-42ed-a77a-9bb987298722","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T04:14:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1707c8b4-ac7e-42ed-a77a-9bb987298722","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T04:14:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1707c8b4-ac7e-42ed-a77a-9bb987298722","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T04:14:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d903981-f543-4a44-8afa-adaebbf87c22","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60430","PortSpecifier":{"PortValue":60430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0d903981-f543-4a44-8afa-adaebbf87c22","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-38610b.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T04:14:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d903981-f543-4a44-8afa-adaebbf87c22","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60430","PortSpecifier":{"PortValue":60430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784693682,"nanos":526274025},"http":{"id":"0d903981-f543-4a44-8afa-adaebbf87c22","method":"POST","headers":{":authority":"e2e-shared-b-38610b.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:14:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0d903981-f543-4a44-8afa-adaebbf87c22","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T04:14:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0d903981-f543-4a44-8afa-adaebbf87c22","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"88d523f6-2b3e-4966-9ce1-debf8be3a1cf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=eaea3edd-9c76-456b-b6f4-85607b8e9c74"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e824959af2ef"]}}
{"level":"debug","ts":"2026-07-22T04:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0d903981-f543-4a44-8afa-adaebbf87c22","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e824959af2ef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eaea3edd-9c76-456b-b6f4-85607b8e9c74"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"88d523f6-2b3e-4966-9ce1-debf8be3a1cf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-38610b.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d903981-f543-4a44-8afa-adaebbf87c22","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d903981-f543-4a44-8afa-adaebbf87c22","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d903981-f543-4a44-8afa-adaebbf87c22","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-38610b/auth-test-model-38610b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-38610b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:14:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0d903981-f543-4a44-8afa-adaebbf87c22","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T04:14:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d903981-f543-4a44-8afa-adaebbf87c22","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T04:14:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d903981-f543-4a44-8afa-adaebbf87c22","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-22T04:14:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d903981-f543-4a44-8afa-adaebbf87c22","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T04:14:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d903981-f543-4a44-8afa-adaebbf87c22","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T04:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e"}
{"level":"info","ts":"2026-07-22T04:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d"}
{"level":"info","ts":"2026-07-22T04:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd"}
{"level":"info","ts":"2026-07-22T04:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924"}
{"level":"info","ts":"2026-07-22T04:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b59a240319d6d86cad0bef800632857bcfea9e4018d1354841aea45de7c5b67"}
{"level":"info","ts":"2026-07-22T04:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a"}
{"level":"info","ts":"2026-07-22T04:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21"}
{"level":"info","ts":"2026-07-22T04:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/519f777f9a05d0ea4fd9c14f0d524ea706083dc950bcee8d30345860da4bcf2c"}
{"level":"info","ts":"2026-07-22T04:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16"}
{"level":"info","ts":"2026-07-22T04:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6997f8e64a6da85ff2b2ae8538d8fcb415a3d8c3bc57a511029e61badad99b19"}
{"level":"info","ts":"2026-07-22T04:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7"}
{"level":"info","ts":"2026-07-22T04:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324"}
{"level":"debug","ts":"2026-07-22T04:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd"}
{"level":"info","ts":"2026-07-22T04:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-22T04:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T04:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd"}
{"level":"debug","ts":"2026-07-22T04:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd"}
{"level":"debug","ts":"2026-07-22T04:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:14:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:14:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd"}
{"level":"debug","ts":"2026-07-22T04:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd"}
{"level":"debug","ts":"2026-07-22T04:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:14:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:14:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd"}
{"level":"debug","ts":"2026-07-22T04:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16"}
{"level":"info","ts":"2026-07-22T04:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-22T04:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T04:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16"}
{"level":"info","ts":"2026-07-22T04:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16"}
{"level":"debug","ts":"2026-07-22T04:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:14:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:14:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16"}
{"level":"debug","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7"}
{"level":"info","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:14:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:14:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a"}
{"level":"info","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:14:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:14:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7"}
{"level":"info","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:14:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:14:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a"}
{"level":"info","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:14:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:14:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7"}
{"level":"debug","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:14:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:14:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a"}
{"level":"info","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7"}
{"level":"debug","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b59a240319d6d86cad0bef800632857bcfea9e4018d1354841aea45de7c5b67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b59a240319d6d86cad0bef800632857bcfea9e4018d1354841aea45de7c5b67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b59a240319d6d86cad0bef800632857bcfea9e4018d1354841aea45de7c5b67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b59a240319d6d86cad0bef800632857bcfea9e4018d1354841aea45de7c5b67","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b59a240319d6d86cad0bef800632857bcfea9e4018d1354841aea45de7c5b67"}
{"level":"debug","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b59a240319d6d86cad0bef800632857bcfea9e4018d1354841aea45de7c5b67","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b59a240319d6d86cad0bef800632857bcfea9e4018d1354841aea45de7c5b67"}
{"level":"debug","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b59a240319d6d86cad0bef800632857bcfea9e4018d1354841aea45de7c5b67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:14:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:14:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b59a240319d6d86cad0bef800632857bcfea9e4018d1354841aea45de7c5b67"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b59a240319d6d86cad0bef800632857bcfea9e4018d1354841aea45de7c5b67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b59a240319d6d86cad0bef800632857bcfea9e4018d1354841aea45de7c5b67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6997f8e64a6da85ff2b2ae8538d8fcb415a3d8c3bc57a511029e61badad99b19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b59a240319d6d86cad0bef800632857bcfea9e4018d1354841aea45de7c5b67"}
{"level":"info","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6997f8e64a6da85ff2b2ae8538d8fcb415a3d8c3bc57a511029e61badad99b19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6997f8e64a6da85ff2b2ae8538d8fcb415a3d8c3bc57a511029e61badad99b19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6997f8e64a6da85ff2b2ae8538d8fcb415a3d8c3bc57a511029e61badad99b19"}
{"level":"info","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6997f8e64a6da85ff2b2ae8538d8fcb415a3d8c3bc57a511029e61badad99b19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6997f8e64a6da85ff2b2ae8538d8fcb415a3d8c3bc57a511029e61badad99b19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6997f8e64a6da85ff2b2ae8538d8fcb415a3d8c3bc57a511029e61badad99b19","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6997f8e64a6da85ff2b2ae8538d8fcb415a3d8c3bc57a511029e61badad99b19\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6997f8e64a6da85ff2b2ae8538d8fcb415a3d8c3bc57a511029e61badad99b19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6997f8e64a6da85ff2b2ae8538d8fcb415a3d8c3bc57a511029e61badad99b19","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6997f8e64a6da85ff2b2ae8538d8fcb415a3d8c3bc57a511029e61badad99b19"}
{"level":"info","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6997f8e64a6da85ff2b2ae8538d8fcb415a3d8c3bc57a511029e61badad99b19"}
{"level":"debug","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21"}
{"level":"info","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6997f8e64a6da85ff2b2ae8538d8fcb415a3d8c3bc57a511029e61badad99b19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:14:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:14:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6997f8e64a6da85ff2b2ae8538d8fcb415a3d8c3bc57a511029e61badad99b19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21"}
{"level":"info","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21"}
{"level":"info","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6997f8e64a6da85ff2b2ae8538d8fcb415a3d8c3bc57a511029e61badad99b19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:14:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:14:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6997f8e64a6da85ff2b2ae8538d8fcb415a3d8c3bc57a511029e61badad99b19"}
{"level":"info","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6997f8e64a6da85ff2b2ae8538d8fcb415a3d8c3bc57a511029e61badad99b19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21"}
{"level":"info","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e"}
{"level":"info","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:14:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:14:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21"}
{"level":"info","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:14:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:14:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e"}
{"level":"info","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e"}
{"level":"info","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21"}
{"level":"debug","ts":"2026-07-22T04:14:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"519f777f9a05d0ea4fd9c14f0d524ea706083dc950bcee8d30345860da4bcf2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d"}
{"level":"info","ts":"2026-07-22T04:14:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"519f777f9a05d0ea4fd9c14f0d524ea706083dc950bcee8d30345860da4bcf2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:14:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:14:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/519f777f9a05d0ea4fd9c14f0d524ea706083dc950bcee8d30345860da4bcf2c"}
{"level":"info","ts":"2026-07-22T04:14:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"519f777f9a05d0ea4fd9c14f0d524ea706083dc950bcee8d30345860da4bcf2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:14:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:14:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["519f777f9a05d0ea4fd9c14f0d524ea706083dc950bcee8d30345860da4bcf2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"519f777f9a05d0ea4fd9c14f0d524ea706083dc950bcee8d30345860da4bcf2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d"}
{"level":"info","ts":"2026-07-22T04:14:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"519f777f9a05d0ea4fd9c14f0d524ea706083dc950bcee8d30345860da4bcf2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/519f777f9a05d0ea4fd9c14f0d524ea706083dc950bcee8d30345860da4bcf2c"}
{"level":"info","ts":"2026-07-22T04:14:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"519f777f9a05d0ea4fd9c14f0d524ea706083dc950bcee8d30345860da4bcf2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"519f777f9a05d0ea4fd9c14f0d524ea706083dc950bcee8d30345860da4bcf2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:14:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:14:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["519f777f9a05d0ea4fd9c14f0d524ea706083dc950bcee8d30345860da4bcf2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"519f777f9a05d0ea4fd9c14f0d524ea706083dc950bcee8d30345860da4bcf2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d"}
{"level":"info","ts":"2026-07-22T04:14:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"519f777f9a05d0ea4fd9c14f0d524ea706083dc950bcee8d30345860da4bcf2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/519f777f9a05d0ea4fd9c14f0d524ea706083dc950bcee8d30345860da4bcf2c"}
{"level":"info","ts":"2026-07-22T04:14:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"519f777f9a05d0ea4fd9c14f0d524ea706083dc950bcee8d30345860da4bcf2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:14:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:14:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924"}
{"level":"info","ts":"2026-07-22T04:14:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:14:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:14:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324"}
{"level":"info","ts":"2026-07-22T04:14:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"519f777f9a05d0ea4fd9c14f0d524ea706083dc950bcee8d30345860da4bcf2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:14:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:14:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:14:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:14:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/519f777f9a05d0ea4fd9c14f0d524ea706083dc950bcee8d30345860da4bcf2c"}
{"level":"info","ts":"2026-07-22T04:14:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"519f777f9a05d0ea4fd9c14f0d524ea706083dc950bcee8d30345860da4bcf2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:14:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:14:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["519f777f9a05d0ea4fd9c14f0d524ea706083dc950bcee8d30345860da4bcf2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:14:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924"}
{"level":"info","ts":"2026-07-22T04:14:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"519f777f9a05d0ea4fd9c14f0d524ea706083dc950bcee8d30345860da4bcf2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:14:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"519f777f9a05d0ea4fd9c14f0d524ea706083dc950bcee8d30345860da4bcf2c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:14:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d"}
{"level":"info","ts":"2026-07-22T04:14:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324"}
{"level":"info","ts":"2026-07-22T04:14:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924"}
{"level":"info","ts":"2026-07-22T04:14:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/519f777f9a05d0ea4fd9c14f0d524ea706083dc950bcee8d30345860da4bcf2c"}
{"level":"info","ts":"2026-07-22T04:14:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"adbc47a2-9c5b-45ed-857f-16028194a4db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53288","PortSpecifier":{"PortValue":53288}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"adbc47a2-9c5b-45ed-857f-16028194a4db","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T04:14:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"adbc47a2-9c5b-45ed-857f-16028194a4db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53288","PortSpecifier":{"PortValue":53288}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784693699,"nanos":668554682},"http":{"id":"adbc47a2-9c5b-45ed-857f-16028194a4db","method":"POST","headers":{":authority":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:14:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"adbc47a2-9c5b-45ed-857f-16028194a4db","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T04:14:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"adbc47a2-9c5b-45ed-857f-16028194a4db","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"88d523f6-2b3e-4966-9ce1-debf8be3a1cf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=eaea3edd-9c76-456b-b6f4-85607b8e9c74"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e824959af2ef"]}}
{"level":"debug","ts":"2026-07-22T04:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"adbc47a2-9c5b-45ed-857f-16028194a4db","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e824959af2ef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eaea3edd-9c76-456b-b6f4-85607b8e9c74"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"88d523f6-2b3e-4966-9ce1-debf8be3a1cf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"576145c34970595258c11ed536f327904a340d543c0f2941856d51ef0549a993"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"adbc47a2-9c5b-45ed-857f-16028194a4db","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"adbc47a2-9c5b-45ed-857f-16028194a4db","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"adbc47a2-9c5b-45ed-857f-16028194a4db","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-dd1671/auth-test-model-dd1671\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-dd1671/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"adbc47a2-9c5b-45ed-857f-16028194a4db","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T04:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"adbc47a2-9c5b-45ed-857f-16028194a4db","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T04:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"adbc47a2-9c5b-45ed-857f-16028194a4db","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T04:14:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"adbc47a2-9c5b-45ed-857f-16028194a4db","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T04:14:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"adbc47a2-9c5b-45ed-857f-16028194a4db","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T04:14:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"043c0614-ba39-4d86-9331-05f3a4391495","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39718","PortSpecifier":{"PortValue":39718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"043c0614-ba39-4d86-9331-05f3a4391495","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-38610b.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T04:14:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"043c0614-ba39-4d86-9331-05f3a4391495","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39718","PortSpecifier":{"PortValue":39718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784693699,"nanos":733503460},"http":{"id":"043c0614-ba39-4d86-9331-05f3a4391495","method":"POST","headers":{":authority":"e2e-shared-b-38610b.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:14:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"043c0614-ba39-4d86-9331-05f3a4391495","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T04:14:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"043c0614-ba39-4d86-9331-05f3a4391495","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"88d523f6-2b3e-4966-9ce1-debf8be3a1cf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=eaea3edd-9c76-456b-b6f4-85607b8e9c74"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e824959af2ef"]}}
{"level":"debug","ts":"2026-07-22T04:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"043c0614-ba39-4d86-9331-05f3a4391495","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e824959af2ef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eaea3edd-9c76-456b-b6f4-85607b8e9c74"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"88d523f6-2b3e-4966-9ce1-debf8be3a1cf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-38610b.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"043c0614-ba39-4d86-9331-05f3a4391495","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"043c0614-ba39-4d86-9331-05f3a4391495","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"043c0614-ba39-4d86-9331-05f3a4391495","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-38610b/auth-test-model-38610b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-38610b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"043c0614-ba39-4d86-9331-05f3a4391495","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T04:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"043c0614-ba39-4d86-9331-05f3a4391495","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T04:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"043c0614-ba39-4d86-9331-05f3a4391495","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T04:14:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"043c0614-ba39-4d86-9331-05f3a4391495","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T04:14:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"043c0614-ba39-4d86-9331-05f3a4391495","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T04:14:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"11313728-9b2d-41d0-95fa-d230c20b6d98","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39724","PortSpecifier":{"PortValue":39724}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"11313728-9b2d-41d0-95fa-d230c20b6d98","method":"GET","path":"/maas-api/v1/api-keys/9e990904-775a-4411-b70d-15569ffa4eb5","host":"e2e-shared-b-38610b.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T04:14:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"11313728-9b2d-41d0-95fa-d230c20b6d98","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39724","PortSpecifier":{"PortValue":39724}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784693699,"nanos":765020257},"http":{"id":"11313728-9b2d-41d0-95fa-d230c20b6d98","method":"GET","headers":{":authority":"e2e-shared-b-38610b.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9e990904-775a-4411-b70d-15569ffa4eb5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:14:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"11313728-9b2d-41d0-95fa-d230c20b6d98","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T04:14:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"11313728-9b2d-41d0-95fa-d230c20b6d98","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"88d523f6-2b3e-4966-9ce1-debf8be3a1cf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=eaea3edd-9c76-456b-b6f4-85607b8e9c74"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e824959af2ef"]}}
{"level":"debug","ts":"2026-07-22T04:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"11313728-9b2d-41d0-95fa-d230c20b6d98","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e824959af2ef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eaea3edd-9c76-456b-b6f4-85607b8e9c74"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"88d523f6-2b3e-4966-9ce1-debf8be3a1cf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-38610b.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9e990904-775a-4411-b70d-15569ffa4eb5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11313728-9b2d-41d0-95fa-d230c20b6d98","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11313728-9b2d-41d0-95fa-d230c20b6d98","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11313728-9b2d-41d0-95fa-d230c20b6d98","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-38610b/auth-test-model-38610b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-38610b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"11313728-9b2d-41d0-95fa-d230c20b6d98","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T04:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"11313728-9b2d-41d0-95fa-d230c20b6d98","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T04:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"11313728-9b2d-41d0-95fa-d230c20b6d98","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-22T04:14:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"11313728-9b2d-41d0-95fa-d230c20b6d98","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T04:14:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"11313728-9b2d-41d0-95fa-d230c20b6d98","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T04:14:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e8ccd6ba-7c35-44a6-b058-27757fd624bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53294","PortSpecifier":{"PortValue":53294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e8ccd6ba-7c35-44a6-b058-27757fd624bb","method":"GET","path":"/maas-api/v1/api-keys/9e990904-775a-4411-b70d-15569ffa4eb5","host":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T04:14:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e8ccd6ba-7c35-44a6-b058-27757fd624bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53294","PortSpecifier":{"PortValue":53294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784693699,"nanos":809632250},"http":{"id":"e8ccd6ba-7c35-44a6-b058-27757fd624bb","method":"GET","headers":{":authority":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9e990904-775a-4411-b70d-15569ffa4eb5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:14:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e8ccd6ba-7c35-44a6-b058-27757fd624bb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T04:14:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e8ccd6ba-7c35-44a6-b058-27757fd624bb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"88d523f6-2b3e-4966-9ce1-debf8be3a1cf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=eaea3edd-9c76-456b-b6f4-85607b8e9c74"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e824959af2ef"]}}
{"level":"debug","ts":"2026-07-22T04:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e8ccd6ba-7c35-44a6-b058-27757fd624bb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e824959af2ef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eaea3edd-9c76-456b-b6f4-85607b8e9c74"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"88d523f6-2b3e-4966-9ce1-debf8be3a1cf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"576145c34970595258c11ed536f327904a340d543c0f2941856d51ef0549a993"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9e990904-775a-4411-b70d-15569ffa4eb5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8ccd6ba-7c35-44a6-b058-27757fd624bb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8ccd6ba-7c35-44a6-b058-27757fd624bb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8ccd6ba-7c35-44a6-b058-27757fd624bb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-dd1671/auth-test-model-dd1671\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-dd1671/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e8ccd6ba-7c35-44a6-b058-27757fd624bb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T04:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e8ccd6ba-7c35-44a6-b058-27757fd624bb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T04:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e8ccd6ba-7c35-44a6-b058-27757fd624bb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T04:14:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e8ccd6ba-7c35-44a6-b058-27757fd624bb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T04:14:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e8ccd6ba-7c35-44a6-b058-27757fd624bb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T04:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7"}
{"level":"info","ts":"2026-07-22T04:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a"}
{"level":"info","ts":"2026-07-22T04:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b59a240319d6d86cad0bef800632857bcfea9e4018d1354841aea45de7c5b67"}
{"level":"info","ts":"2026-07-22T04:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924"}
{"level":"info","ts":"2026-07-22T04:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d"}
{"level":"info","ts":"2026-07-22T04:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324"}
{"level":"info","ts":"2026-07-22T04:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16"}
{"level":"info","ts":"2026-07-22T04:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21"}
{"level":"info","ts":"2026-07-22T04:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e"}
{"level":"info","ts":"2026-07-22T04:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6997f8e64a6da85ff2b2ae8538d8fcb415a3d8c3bc57a511029e61badad99b19"}
{"level":"info","ts":"2026-07-22T04:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/519f777f9a05d0ea4fd9c14f0d524ea706083dc950bcee8d30345860da4bcf2c"}
{"level":"info","ts":"2026-07-22T04:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd"}
{"level":"debug","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"519f777f9a05d0ea4fd9c14f0d524ea706083dc950bcee8d30345860da4bcf2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:15:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:15:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"519f777f9a05d0ea4fd9c14f0d524ea706083dc950bcee8d30345860da4bcf2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"519f777f9a05d0ea4fd9c14f0d524ea706083dc950bcee8d30345860da4bcf2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"519f777f9a05d0ea4fd9c14f0d524ea706083dc950bcee8d30345860da4bcf2c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/519f777f9a05d0ea4fd9c14f0d524ea706083dc950bcee8d30345860da4bcf2c"}
{"level":"debug","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"519f777f9a05d0ea4fd9c14f0d524ea706083dc950bcee8d30345860da4bcf2c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/519f777f9a05d0ea4fd9c14f0d524ea706083dc950bcee8d30345860da4bcf2c"}
{"level":"debug","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"519f777f9a05d0ea4fd9c14f0d524ea706083dc950bcee8d30345860da4bcf2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:15:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:15:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["519f777f9a05d0ea4fd9c14f0d524ea706083dc950bcee8d30345860da4bcf2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"519f777f9a05d0ea4fd9c14f0d524ea706083dc950bcee8d30345860da4bcf2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"519f777f9a05d0ea4fd9c14f0d524ea706083dc950bcee8d30345860da4bcf2c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/519f777f9a05d0ea4fd9c14f0d524ea706083dc950bcee8d30345860da4bcf2c"}
{"level":"debug","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:15:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:15:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:15:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:15:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d"}
{"level":"info","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:15:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:15:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d"}
{"level":"debug","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d"}
{"level":"debug","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:15:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:15:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:15:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:15:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d"}
{"level":"debug","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d"}
{"level":"debug","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:15:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:15:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d"}
{"level":"debug","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:15:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:15:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:15:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:15:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324"}
{"level":"info","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:15:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:15:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324"}
{"level":"info","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324"}
{"level":"debug","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:15:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:15:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:15:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:15:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324"}
{"level":"debug","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324"}
{"level":"debug","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b59a240319d6d86cad0bef800632857bcfea9e4018d1354841aea45de7c5b67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:15:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:15:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b59a240319d6d86cad0bef800632857bcfea9e4018d1354841aea45de7c5b67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:15:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:15:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b59a240319d6d86cad0bef800632857bcfea9e4018d1354841aea45de7c5b67"}
{"level":"info","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b59a240319d6d86cad0bef800632857bcfea9e4018d1354841aea45de7c5b67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:15:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:15:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b59a240319d6d86cad0bef800632857bcfea9e4018d1354841aea45de7c5b67"}
{"level":"info","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b59a240319d6d86cad0bef800632857bcfea9e4018d1354841aea45de7c5b67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:15:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:15:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b59a240319d6d86cad0bef800632857bcfea9e4018d1354841aea45de7c5b67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:15:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:15:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b59a240319d6d86cad0bef800632857bcfea9e4018d1354841aea45de7c5b67"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324"}
{"level":"info","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b59a240319d6d86cad0bef800632857bcfea9e4018d1354841aea45de7c5b67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:15:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:15:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b59a240319d6d86cad0bef800632857bcfea9e4018d1354841aea45de7c5b67"}
{"level":"info","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b59a240319d6d86cad0bef800632857bcfea9e4018d1354841aea45de7c5b67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:15:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:15:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324"}
{"level":"debug","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:15:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:15:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b59a240319d6d86cad0bef800632857bcfea9e4018d1354841aea45de7c5b67"}
{"level":"info","ts":"2026-07-22T04:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324"}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e"}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e"}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e"}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e"}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6997f8e64a6da85ff2b2ae8538d8fcb415a3d8c3bc57a511029e61badad99b19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6997f8e64a6da85ff2b2ae8538d8fcb415a3d8c3bc57a511029e61badad99b19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6997f8e64a6da85ff2b2ae8538d8fcb415a3d8c3bc57a511029e61badad99b19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6997f8e64a6da85ff2b2ae8538d8fcb415a3d8c3bc57a511029e61badad99b19","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6997f8e64a6da85ff2b2ae8538d8fcb415a3d8c3bc57a511029e61badad99b19"}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6997f8e64a6da85ff2b2ae8538d8fcb415a3d8c3bc57a511029e61badad99b19"}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6997f8e64a6da85ff2b2ae8538d8fcb415a3d8c3bc57a511029e61badad99b19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6997f8e64a6da85ff2b2ae8538d8fcb415a3d8c3bc57a511029e61badad99b19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6997f8e64a6da85ff2b2ae8538d8fcb415a3d8c3bc57a511029e61badad99b19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6997f8e64a6da85ff2b2ae8538d8fcb415a3d8c3bc57a511029e61badad99b19","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6997f8e64a6da85ff2b2ae8538d8fcb415a3d8c3bc57a511029e61badad99b19"}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7"}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd"}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7"}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd"}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7"}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd"}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21"}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924"}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd"}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21"}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924"}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd"}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a"}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16"}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21"}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a"}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16"}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a"}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a"}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a"}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a"}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:15:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:15:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a"}
{"level":"debug","ts":"2026-07-22T04:15:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:15:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a"}
{"level":"debug","ts":"2026-07-22T04:15:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:15:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:15:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:15:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:15:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:15:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a"}
{"level":"debug","ts":"2026-07-22T04:15:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:15:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a"}
{"level":"debug","ts":"2026-07-22T04:15:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:15:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:15:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:15:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:15:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:15:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a"}
{"level":"debug","ts":"2026-07-22T04:15:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:15:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a"}
{"level":"debug","ts":"2026-07-22T04:15:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:15:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:15:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:15:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:15:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:15:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a"}
{"level":"debug","ts":"2026-07-22T04:15:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:15:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a"}
{"level":"debug","ts":"2026-07-22T04:15:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:15:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:15:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:15:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:15:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a"}
{"level":"info","ts":"2026-07-22T04:15:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:15:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:15:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:15:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:15:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a"}
{"level":"info","ts":"2026-07-22T04:15:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:15:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:15:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a"}
{"level":"error","ts":"2026-07-22T04:15:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T04:15:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:15:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a"}
{"level":"debug","ts":"2026-07-22T04:15:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:15:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:15:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:15:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:15:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:15:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a"}
{"level":"info","ts":"2026-07-22T04:15:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4ac072d2-414b-44d1-9536-3b95b7a5407b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50046","PortSpecifier":{"PortValue":50046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4ac072d2-414b-44d1-9536-3b95b7a5407b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T04:15:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4ac072d2-414b-44d1-9536-3b95b7a5407b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50046","PortSpecifier":{"PortValue":50046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784693717,"nanos":33304238},"http":{"id":"4ac072d2-414b-44d1-9536-3b95b7a5407b","method":"POST","headers":{":authority":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:15:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4ac072d2-414b-44d1-9536-3b95b7a5407b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T04:15:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4ac072d2-414b-44d1-9536-3b95b7a5407b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"88d523f6-2b3e-4966-9ce1-debf8be3a1cf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=eaea3edd-9c76-456b-b6f4-85607b8e9c74"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e824959af2ef"]}}
{"level":"debug","ts":"2026-07-22T04:15:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4ac072d2-414b-44d1-9536-3b95b7a5407b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e824959af2ef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eaea3edd-9c76-456b-b6f4-85607b8e9c74"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"88d523f6-2b3e-4966-9ce1-debf8be3a1cf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"576145c34970595258c11ed536f327904a340d543c0f2941856d51ef0549a993"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:15:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ac072d2-414b-44d1-9536-3b95b7a5407b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:15:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ac072d2-414b-44d1-9536-3b95b7a5407b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:15:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ac072d2-414b-44d1-9536-3b95b7a5407b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-dd1671/auth-test-model-dd1671\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-dd1671/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:15:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4ac072d2-414b-44d1-9536-3b95b7a5407b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T04:15:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ac072d2-414b-44d1-9536-3b95b7a5407b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T04:15:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ac072d2-414b-44d1-9536-3b95b7a5407b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T04:15:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4ac072d2-414b-44d1-9536-3b95b7a5407b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T04:15:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4ac072d2-414b-44d1-9536-3b95b7a5407b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T04:15:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"abe2884f-f0cd-4a6e-8181-653ed40d96d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60638","PortSpecifier":{"PortValue":60638}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"abe2884f-f0cd-4a6e-8181-653ed40d96d7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-38610b.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T04:15:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"abe2884f-f0cd-4a6e-8181-653ed40d96d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60638","PortSpecifier":{"PortValue":60638}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784693717,"nanos":63452949},"http":{"id":"abe2884f-f0cd-4a6e-8181-653ed40d96d7","method":"POST","headers":{":authority":"e2e-shared-b-38610b.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:15:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"abe2884f-f0cd-4a6e-8181-653ed40d96d7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T04:15:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"abe2884f-f0cd-4a6e-8181-653ed40d96d7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"88d523f6-2b3e-4966-9ce1-debf8be3a1cf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=eaea3edd-9c76-456b-b6f4-85607b8e9c74"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e824959af2ef"]}}
{"level":"debug","ts":"2026-07-22T04:15:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"abe2884f-f0cd-4a6e-8181-653ed40d96d7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e824959af2ef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eaea3edd-9c76-456b-b6f4-85607b8e9c74"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"88d523f6-2b3e-4966-9ce1-debf8be3a1cf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-38610b.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:15:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"abe2884f-f0cd-4a6e-8181-653ed40d96d7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:15:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"abe2884f-f0cd-4a6e-8181-653ed40d96d7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:15:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"abe2884f-f0cd-4a6e-8181-653ed40d96d7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-38610b/auth-test-model-38610b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-38610b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:15:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"abe2884f-f0cd-4a6e-8181-653ed40d96d7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T04:15:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"abe2884f-f0cd-4a6e-8181-653ed40d96d7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T04:15:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"abe2884f-f0cd-4a6e-8181-653ed40d96d7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-22T04:15:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"abe2884f-f0cd-4a6e-8181-653ed40d96d7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T04:15:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"abe2884f-f0cd-4a6e-8181-653ed40d96d7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T04:15:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f13701f-559f-4e89-b569-0be36b7af8bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50062","PortSpecifier":{"PortValue":50062}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8f13701f-559f-4e89-b569-0be36b7af8bc","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T04:15:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f13701f-559f-4e89-b569-0be36b7af8bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50062","PortSpecifier":{"PortValue":50062}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784693717,"nanos":110040002},"http":{"id":"8f13701f-559f-4e89-b569-0be36b7af8bc","method":"POST","headers":{":authority":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:15:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8f13701f-559f-4e89-b569-0be36b7af8bc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Fu7RcD7LsjjbEfGF_SueUJBMYUaGOlt5grM4r9qAQ8lQhr60IJYqXsV7VS1m"}
{"level":"debug","ts":"2026-07-22T04:15:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8f13701f-559f-4e89-b569-0be36b7af8bc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Fu7RcD7LsjjbEfGF_SueUJBMYUaGOlt5grM4r9qAQ8lQhr60IJYqXsV7VS1m\"}"}
{"level":"debug","ts":"2026-07-22T04:15:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8f13701f-559f-4e89-b569-0be36b7af8bc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e881ae76-38b9-40ac-a609-a47a51b6395e","keyName":"e2e-auth-iso-a-a43306","subscription":"e2e-auth-iso-17d99b","tenant":"e2e-shared-a-dd1671","userId":"e881ae76-38b9-40ac-a609-a47a51b6395e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T04:15:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8f13701f-559f-4e89-b569-0be36b7af8bc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:15:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f13701f-559f-4e89-b569-0be36b7af8bc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:15:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f13701f-559f-4e89-b569-0be36b7af8bc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:15:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f13701f-559f-4e89-b569-0be36b7af8bc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-dd1671/auth-test-model-dd1671\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-dd1671/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:15:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8f13701f-559f-4e89-b569-0be36b7af8bc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-22T04:15:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f13701f-559f-4e89-b569-0be36b7af8bc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-17d99b"}
{"level":"debug","ts":"2026-07-22T04:15:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f13701f-559f-4e89-b569-0be36b7af8bc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T04:15:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f13701f-559f-4e89-b569-0be36b7af8bc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T04:15:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f13701f-559f-4e89-b569-0be36b7af8bc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T04:15:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f13701f-559f-4e89-b569-0be36b7af8bc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T04:15:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/519f777f9a05d0ea4fd9c14f0d524ea706083dc950bcee8d30345860da4bcf2c"}
{"level":"info","ts":"2026-07-22T04:15:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f5cc39b2d505bf4896e5f5d750ba4a3f4ffc24955f24492020cfecbc8e47219"}
{"level":"info","ts":"2026-07-22T04:15:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f591309607891c12eb3fa6b0a231fabb16151d15feb33fad142442b67472b16"}
{"level":"info","ts":"2026-07-22T04:15:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6997f8e64a6da85ff2b2ae8538d8fcb415a3d8c3bc57a511029e61badad99b19"}
{"level":"info","ts":"2026-07-22T04:15:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a85c1e74150df2ad6d07cea31efa76a93fad7abb186fdce6a3331ca189b7d55e"}
{"level":"info","ts":"2026-07-22T04:15:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0be5733f8f7237251fdd67fc8e0a862b5124ffba93093fcb6f75a1eabea66f39"}
{"level":"info","ts":"2026-07-22T04:15:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a14b3d623ec53df438e2f3c63123f4a15d31bdfe7268f3f2e70677a3f305a324"}
{"level":"info","ts":"2026-07-22T04:15:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b516821baf75df17ebe6869826ce5299d9e689089116c788978393d0cd847fcd"}
{"level":"info","ts":"2026-07-22T04:15:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1de26d313713d02f1f7c42fd6bee7eaef8cc77f1cce6e610268c2e95e013e6c7"}
{"level":"info","ts":"2026-07-22T04:15:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd"}
{"level":"info","ts":"2026-07-22T04:15:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e7ae8bfee442be0d4b612c0ba23f2d7f40a3d84cb1b199deefed4b067b7f2202"}
{"level":"info","ts":"2026-07-22T04:15:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b59a240319d6d86cad0bef800632857bcfea9e4018d1354841aea45de7c5b67"}
{"level":"info","ts":"2026-07-22T04:15:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/576145c34970595258c11ed536f327904a340d543c0f2941856d51ef0549a993"}
{"level":"info","ts":"2026-07-22T04:15:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/388c2f3822fefe5471a3405ae0ce46de95b86b98b77a6de8fbfc1db4275fb10c"}
{"level":"info","ts":"2026-07-22T04:15:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a84215a0c428736e3b34930324ffa652a7a8671dd7db5458d65daa979e0139a"}
{"level":"info","ts":"2026-07-22T04:15:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e"}
{"level":"info","ts":"2026-07-22T04:15:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7"}
{"level":"info","ts":"2026-07-22T04:15:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc3254a41c43f259a823f2f11d7618cfd2a3b3e0593f0fe6c7f0bede67ada570"}
{"level":"info","ts":"2026-07-22T04:15:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924"}
{"level":"info","ts":"2026-07-22T04:15:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d1e3cc110a54858c66776106994db461774f556ba2d1cd9bae2283658310fd03"}
{"level":"info","ts":"2026-07-22T04:15:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25530d94158ee3faa471937282904ccc9b1e2cdd6b240e9f74978b5764ae4e21"}
{"level":"info","ts":"2026-07-22T04:15:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/46835e6314e57a6ecc1bd905b9e7e0ccbcc49ff260e74f8fec70334d7860118d"}
{"level":"info","ts":"2026-07-22T04:15:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf11f4843a5dca814f06186bded6d519f2160434d2929be1b5efcd6fb69b32d9"}
{"level":"info","ts":"2026-07-22T04:15:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9aaf4c172da06cc517baefe6a365944c0f3c74abd694620413ba73f63158bf0b"}
{"level":"debug","ts":"2026-07-22T04:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:16:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:16:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd"}
{"level":"debug","ts":"2026-07-22T04:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd"}
{"level":"debug","ts":"2026-07-22T04:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:16:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:16:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:16:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:16:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd"}
{"level":"debug","ts":"2026-07-22T04:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd"}
{"level":"debug","ts":"2026-07-22T04:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:16:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:16:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd"}
{"level":"debug","ts":"2026-07-22T04:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42c43479f17f52d6ef8247fb624d3d175b730dabe71467d67b88305e1360c49a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:16:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:16:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42c43479f17f52d6ef8247fb624d3d175b730dabe71467d67b88305e1360c49a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42c43479f17f52d6ef8247fb624d3d175b730dabe71467d67b88305e1360c49a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:16:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:16:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42c43479f17f52d6ef8247fb624d3d175b730dabe71467d67b88305e1360c49a"}
{"level":"info","ts":"2026-07-22T04:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42c43479f17f52d6ef8247fb624d3d175b730dabe71467d67b88305e1360c49a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42c43479f17f52d6ef8247fb624d3d175b730dabe71467d67b88305e1360c49a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:16:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:16:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-22T04:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"42c43479f17f52d6ef8247fb624d3d175b730dabe71467d67b88305e1360c49a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"42c43479f17f52d6ef8247fb624d3d175b730dabe71467d67b88305e1360c49a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T04:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42c43479f17f52d6ef8247fb624d3d175b730dabe71467d67b88305e1360c49a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42c43479f17f52d6ef8247fb624d3d175b730dabe71467d67b88305e1360c49a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42c43479f17f52d6ef8247fb624d3d175b730dabe71467d67b88305e1360c49a"}
{"level":"info","ts":"2026-07-22T04:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42c43479f17f52d6ef8247fb624d3d175b730dabe71467d67b88305e1360c49a"}
{"level":"debug","ts":"2026-07-22T04:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42c43479f17f52d6ef8247fb624d3d175b730dabe71467d67b88305e1360c49a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:16:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:16:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42c43479f17f52d6ef8247fb624d3d175b730dabe71467d67b88305e1360c49a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42c43479f17f52d6ef8247fb624d3d175b730dabe71467d67b88305e1360c49a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42c43479f17f52d6ef8247fb624d3d175b730dabe71467d67b88305e1360c49a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:16:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:16:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42c43479f17f52d6ef8247fb624d3d175b730dabe71467d67b88305e1360c49a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42c43479f17f52d6ef8247fb624d3d175b730dabe71467d67b88305e1360c49a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42c43479f17f52d6ef8247fb624d3d175b730dabe71467d67b88305e1360c49a"}
{"level":"debug","ts":"2026-07-22T04:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42c43479f17f52d6ef8247fb624d3d175b730dabe71467d67b88305e1360c49a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42c43479f17f52d6ef8247fb624d3d175b730dabe71467d67b88305e1360c49a"}
{"level":"debug","ts":"2026-07-22T04:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42c43479f17f52d6ef8247fb624d3d175b730dabe71467d67b88305e1360c49a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:16:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:16:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42c43479f17f52d6ef8247fb624d3d175b730dabe71467d67b88305e1360c49a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42c43479f17f52d6ef8247fb624d3d175b730dabe71467d67b88305e1360c49a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42c43479f17f52d6ef8247fb624d3d175b730dabe71467d67b88305e1360c49a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42c43479f17f52d6ef8247fb624d3d175b730dabe71467d67b88305e1360c49a"}
{"level":"debug","ts":"2026-07-22T04:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:16:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:16:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:16:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:16:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e"}
{"level":"info","ts":"2026-07-22T04:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:16:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:16:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-22T04:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T04:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e"}
{"level":"debug","ts":"2026-07-22T04:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:16:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e"}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e"}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79cee444b8a5490c425b94e604574e44dcf4f80ae7668b663825169a5dc28e8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79cee444b8a5490c425b94e604574e44dcf4f80ae7668b663825169a5dc28e8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79cee444b8a5490c425b94e604574e44dcf4f80ae7668b663825169a5dc28e8d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79cee444b8a5490c425b94e604574e44dcf4f80ae7668b663825169a5dc28e8d"}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79cee444b8a5490c425b94e604574e44dcf4f80ae7668b663825169a5dc28e8d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79cee444b8a5490c425b94e604574e44dcf4f80ae7668b663825169a5dc28e8d"}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79cee444b8a5490c425b94e604574e44dcf4f80ae7668b663825169a5dc28e8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79cee444b8a5490c425b94e604574e44dcf4f80ae7668b663825169a5dc28e8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79cee444b8a5490c425b94e604574e44dcf4f80ae7668b663825169a5dc28e8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79cee444b8a5490c425b94e604574e44dcf4f80ae7668b663825169a5dc28e8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79cee444b8a5490c425b94e604574e44dcf4f80ae7668b663825169a5dc28e8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79cee444b8a5490c425b94e604574e44dcf4f80ae7668b663825169a5dc28e8d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79cee444b8a5490c425b94e604574e44dcf4f80ae7668b663825169a5dc28e8d"}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79cee444b8a5490c425b94e604574e44dcf4f80ae7668b663825169a5dc28e8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79cee444b8a5490c425b94e604574e44dcf4f80ae7668b663825169a5dc28e8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79cee444b8a5490c425b94e604574e44dcf4f80ae7668b663825169a5dc28e8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79cee444b8a5490c425b94e604574e44dcf4f80ae7668b663825169a5dc28e8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79cee444b8a5490c425b94e604574e44dcf4f80ae7668b663825169a5dc28e8d"}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79cee444b8a5490c425b94e604574e44dcf4f80ae7668b663825169a5dc28e8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1e3cc110a54858c66776106994db461774f556ba2d1cd9bae2283658310fd03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1e3cc110a54858c66776106994db461774f556ba2d1cd9bae2283658310fd03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79cee444b8a5490c425b94e604574e44dcf4f80ae7668b663825169a5dc28e8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79cee444b8a5490c425b94e604574e44dcf4f80ae7668b663825169a5dc28e8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1e3cc110a54858c66776106994db461774f556ba2d1cd9bae2283658310fd03"}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79cee444b8a5490c425b94e604574e44dcf4f80ae7668b663825169a5dc28e8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1e3cc110a54858c66776106994db461774f556ba2d1cd9bae2283658310fd03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1e3cc110a54858c66776106994db461774f556ba2d1cd9bae2283658310fd03"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1e3cc110a54858c66776106994db461774f556ba2d1cd9bae2283658310fd03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79cee444b8a5490c425b94e604574e44dcf4f80ae7668b663825169a5dc28e8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79cee444b8a5490c425b94e604574e44dcf4f80ae7668b663825169a5dc28e8d"}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79cee444b8a5490c425b94e604574e44dcf4f80ae7668b663825169a5dc28e8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1e3cc110a54858c66776106994db461774f556ba2d1cd9bae2283658310fd03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1e3cc110a54858c66776106994db461774f556ba2d1cd9bae2283658310fd03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79cee444b8a5490c425b94e604574e44dcf4f80ae7668b663825169a5dc28e8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79cee444b8a5490c425b94e604574e44dcf4f80ae7668b663825169a5dc28e8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1e3cc110a54858c66776106994db461774f556ba2d1cd9bae2283658310fd03"}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79cee444b8a5490c425b94e604574e44dcf4f80ae7668b663825169a5dc28e8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1e3cc110a54858c66776106994db461774f556ba2d1cd9bae2283658310fd03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1e3cc110a54858c66776106994db461774f556ba2d1cd9bae2283658310fd03"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79cee444b8a5490c425b94e604574e44dcf4f80ae7668b663825169a5dc28e8d"}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1e3cc110a54858c66776106994db461774f556ba2d1cd9bae2283658310fd03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79cee444b8a5490c425b94e604574e44dcf4f80ae7668b663825169a5dc28e8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc3254a41c43f259a823f2f11d7618cfd2a3b3e0593f0fe6c7f0bede67ada570","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc3254a41c43f259a823f2f11d7618cfd2a3b3e0593f0fe6c7f0bede67ada570","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1e3cc110a54858c66776106994db461774f556ba2d1cd9bae2283658310fd03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1e3cc110a54858c66776106994db461774f556ba2d1cd9bae2283658310fd03"}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1e3cc110a54858c66776106994db461774f556ba2d1cd9bae2283658310fd03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc3254a41c43f259a823f2f11d7618cfd2a3b3e0593f0fe6c7f0bede67ada570","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc3254a41c43f259a823f2f11d7618cfd2a3b3e0593f0fe6c7f0bede67ada570","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1e3cc110a54858c66776106994db461774f556ba2d1cd9bae2283658310fd03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1e3cc110a54858c66776106994db461774f556ba2d1cd9bae2283658310fd03"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc3254a41c43f259a823f2f11d7618cfd2a3b3e0593f0fe6c7f0bede67ada570"}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1e3cc110a54858c66776106994db461774f556ba2d1cd9bae2283658310fd03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc3254a41c43f259a823f2f11d7618cfd2a3b3e0593f0fe6c7f0bede67ada570","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc3254a41c43f259a823f2f11d7618cfd2a3b3e0593f0fe6c7f0bede67ada570"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc3254a41c43f259a823f2f11d7618cfd2a3b3e0593f0fe6c7f0bede67ada570","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1e3cc110a54858c66776106994db461774f556ba2d1cd9bae2283658310fd03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc3254a41c43f259a823f2f11d7618cfd2a3b3e0593f0fe6c7f0bede67ada570","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79cee444b8a5490c425b94e604574e44dcf4f80ae7668b663825169a5dc28e8d"}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50a515dbe9c357793897aa10a0a2866717512e7fe822f0b200d6b9b5e6790ba3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50a515dbe9c357793897aa10a0a2866717512e7fe822f0b200d6b9b5e6790ba3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8578c470dc0c00fd4621a5b1b3ca9d7e6524c72ba7be44c416fc84b3ab99cebc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1e3cc110a54858c66776106994db461774f556ba2d1cd9bae2283658310fd03"}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8578c470dc0c00fd4621a5b1b3ca9d7e6524c72ba7be44c416fc84b3ab99cebc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50a515dbe9c357793897aa10a0a2866717512e7fe822f0b200d6b9b5e6790ba3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8578c470dc0c00fd4621a5b1b3ca9d7e6524c72ba7be44c416fc84b3ab99cebc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8578c470dc0c00fd4621a5b1b3ca9d7e6524c72ba7be44c416fc84b3ab99cebc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50a515dbe9c357793897aa10a0a2866717512e7fe822f0b200d6b9b5e6790ba3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc3254a41c43f259a823f2f11d7618cfd2a3b3e0593f0fe6c7f0bede67ada570"}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8578c470dc0c00fd4621a5b1b3ca9d7e6524c72ba7be44c416fc84b3ab99cebc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50a515dbe9c357793897aa10a0a2866717512e7fe822f0b200d6b9b5e6790ba3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50a515dbe9c357793897aa10a0a2866717512e7fe822f0b200d6b9b5e6790ba3"}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50a515dbe9c357793897aa10a0a2866717512e7fe822f0b200d6b9b5e6790ba3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50a515dbe9c357793897aa10a0a2866717512e7fe822f0b200d6b9b5e6790ba3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50a515dbe9c357793897aa10a0a2866717512e7fe822f0b200d6b9b5e6790ba3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8578c470dc0c00fd4621a5b1b3ca9d7e6524c72ba7be44c416fc84b3ab99cebc"}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50a515dbe9c357793897aa10a0a2866717512e7fe822f0b200d6b9b5e6790ba3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50a515dbe9c357793897aa10a0a2866717512e7fe822f0b200d6b9b5e6790ba3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50a515dbe9c357793897aa10a0a2866717512e7fe822f0b200d6b9b5e6790ba3"}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50a515dbe9c357793897aa10a0a2866717512e7fe822f0b200d6b9b5e6790ba3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8578c470dc0c00fd4621a5b1b3ca9d7e6524c72ba7be44c416fc84b3ab99cebc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8578c470dc0c00fd4621a5b1b3ca9d7e6524c72ba7be44c416fc84b3ab99cebc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8578c470dc0c00fd4621a5b1b3ca9d7e6524c72ba7be44c416fc84b3ab99cebc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50a515dbe9c357793897aa10a0a2866717512e7fe822f0b200d6b9b5e6790ba3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8578c470dc0c00fd4621a5b1b3ca9d7e6524c72ba7be44c416fc84b3ab99cebc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50a515dbe9c357793897aa10a0a2866717512e7fe822f0b200d6b9b5e6790ba3"}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50a515dbe9c357793897aa10a0a2866717512e7fe822f0b200d6b9b5e6790ba3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50a515dbe9c357793897aa10a0a2866717512e7fe822f0b200d6b9b5e6790ba3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8578c470dc0c00fd4621a5b1b3ca9d7e6524c72ba7be44c416fc84b3ab99cebc"}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50a515dbe9c357793897aa10a0a2866717512e7fe822f0b200d6b9b5e6790ba3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50a515dbe9c357793897aa10a0a2866717512e7fe822f0b200d6b9b5e6790ba3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50a515dbe9c357793897aa10a0a2866717512e7fe822f0b200d6b9b5e6790ba3"}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50a515dbe9c357793897aa10a0a2866717512e7fe822f0b200d6b9b5e6790ba3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50a515dbe9c357793897aa10a0a2866717512e7fe822f0b200d6b9b5e6790ba3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50a515dbe9c357793897aa10a0a2866717512e7fe822f0b200d6b9b5e6790ba3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50a515dbe9c357793897aa10a0a2866717512e7fe822f0b200d6b9b5e6790ba3"}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50a515dbe9c357793897aa10a0a2866717512e7fe822f0b200d6b9b5e6790ba3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a74141d5f20fba2379d1531e9d6653cd2a1644df9b0c3ec729c0f7503c07af6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50a515dbe9c357793897aa10a0a2866717512e7fe822f0b200d6b9b5e6790ba3"}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a74141d5f20fba2379d1531e9d6653cd2a1644df9b0c3ec729c0f7503c07af6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a74141d5f20fba2379d1531e9d6653cd2a1644df9b0c3ec729c0f7503c07af6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a74141d5f20fba2379d1531e9d6653cd2a1644df9b0c3ec729c0f7503c07af6b"}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a74141d5f20fba2379d1531e9d6653cd2a1644df9b0c3ec729c0f7503c07af6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a74141d5f20fba2379d1531e9d6653cd2a1644df9b0c3ec729c0f7503c07af6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a74141d5f20fba2379d1531e9d6653cd2a1644df9b0c3ec729c0f7503c07af6b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a74141d5f20fba2379d1531e9d6653cd2a1644df9b0c3ec729c0f7503c07af6b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50a515dbe9c357793897aa10a0a2866717512e7fe822f0b200d6b9b5e6790ba3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50a515dbe9c357793897aa10a0a2866717512e7fe822f0b200d6b9b5e6790ba3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a74141d5f20fba2379d1531e9d6653cd2a1644df9b0c3ec729c0f7503c07af6b"}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50a515dbe9c357793897aa10a0a2866717512e7fe822f0b200d6b9b5e6790ba3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a74141d5f20fba2379d1531e9d6653cd2a1644df9b0c3ec729c0f7503c07af6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50a515dbe9c357793897aa10a0a2866717512e7fe822f0b200d6b9b5e6790ba3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a74141d5f20fba2379d1531e9d6653cd2a1644df9b0c3ec729c0f7503c07af6b"}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50a515dbe9c357793897aa10a0a2866717512e7fe822f0b200d6b9b5e6790ba3"}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a74141d5f20fba2379d1531e9d6653cd2a1644df9b0c3ec729c0f7503c07af6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a74141d5f20fba2379d1531e9d6653cd2a1644df9b0c3ec729c0f7503c07af6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a74141d5f20fba2379d1531e9d6653cd2a1644df9b0c3ec729c0f7503c07af6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a74141d5f20fba2379d1531e9d6653cd2a1644df9b0c3ec729c0f7503c07af6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47d80ad607eea22971ae3cbf602119bc36e13d6af1175acc63b023e7ff570f6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924"}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47d80ad607eea22971ae3cbf602119bc36e13d6af1175acc63b023e7ff570f6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a74141d5f20fba2379d1531e9d6653cd2a1644df9b0c3ec729c0f7503c07af6b"}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47d80ad607eea22971ae3cbf602119bc36e13d6af1175acc63b023e7ff570f6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47d80ad607eea22971ae3cbf602119bc36e13d6af1175acc63b023e7ff570f6d"}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47d80ad607eea22971ae3cbf602119bc36e13d6af1175acc63b023e7ff570f6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47d80ad607eea22971ae3cbf602119bc36e13d6af1175acc63b023e7ff570f6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47d80ad607eea22971ae3cbf602119bc36e13d6af1175acc63b023e7ff570f6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924"}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47d80ad607eea22971ae3cbf602119bc36e13d6af1175acc63b023e7ff570f6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47d80ad607eea22971ae3cbf602119bc36e13d6af1175acc63b023e7ff570f6d"}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47d80ad607eea22971ae3cbf602119bc36e13d6af1175acc63b023e7ff570f6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924"}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47d80ad607eea22971ae3cbf602119bc36e13d6af1175acc63b023e7ff570f6d"}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924"}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9936b2776ae9e49221e2b2e0ffc413c84fac9c8049fde7f1abb66827d21a3061","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9936b2776ae9e49221e2b2e0ffc413c84fac9c8049fde7f1abb66827d21a3061","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2700d8d10dd2a7c34ff75c601fbfdda16e83f96b9a1dd2392f726f681177b719","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9936b2776ae9e49221e2b2e0ffc413c84fac9c8049fde7f1abb66827d21a3061"}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2700d8d10dd2a7c34ff75c601fbfdda16e83f96b9a1dd2392f726f681177b719","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9936b2776ae9e49221e2b2e0ffc413c84fac9c8049fde7f1abb66827d21a3061","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9936b2776ae9e49221e2b2e0ffc413c84fac9c8049fde7f1abb66827d21a3061"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2700d8d10dd2a7c34ff75c601fbfdda16e83f96b9a1dd2392f726f681177b719"}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9936b2776ae9e49221e2b2e0ffc413c84fac9c8049fde7f1abb66827d21a3061","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2700d8d10dd2a7c34ff75c601fbfdda16e83f96b9a1dd2392f726f681177b719","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2700d8d10dd2a7c34ff75c601fbfdda16e83f96b9a1dd2392f726f681177b719"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2700d8d10dd2a7c34ff75c601fbfdda16e83f96b9a1dd2392f726f681177b719","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9936b2776ae9e49221e2b2e0ffc413c84fac9c8049fde7f1abb66827d21a3061","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9936b2776ae9e49221e2b2e0ffc413c84fac9c8049fde7f1abb66827d21a3061"}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9936b2776ae9e49221e2b2e0ffc413c84fac9c8049fde7f1abb66827d21a3061","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2700d8d10dd2a7c34ff75c601fbfdda16e83f96b9a1dd2392f726f681177b719","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:16:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2700d8d10dd2a7c34ff75c601fbfdda16e83f96b9a1dd2392f726f681177b719"}
{"level":"info","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2700d8d10dd2a7c34ff75c601fbfdda16e83f96b9a1dd2392f726f681177b719","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9936b2776ae9e49221e2b2e0ffc413c84fac9c8049fde7f1abb66827d21a3061","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2700d8d10dd2a7c34ff75c601fbfdda16e83f96b9a1dd2392f726f681177b719","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:16:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:16:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2700d8d10dd2a7c34ff75c601fbfdda16e83f96b9a1dd2392f726f681177b719"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2700d8d10dd2a7c34ff75c601fbfdda16e83f96b9a1dd2392f726f681177b719","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9936b2776ae9e49221e2b2e0ffc413c84fac9c8049fde7f1abb66827d21a3061","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2700d8d10dd2a7c34ff75c601fbfdda16e83f96b9a1dd2392f726f681177b719","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:16:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:16:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2700d8d10dd2a7c34ff75c601fbfdda16e83f96b9a1dd2392f726f681177b719"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9936b2776ae9e49221e2b2e0ffc413c84fac9c8049fde7f1abb66827d21a3061"}
{"level":"error","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2700d8d10dd2a7c34ff75c601fbfdda16e83f96b9a1dd2392f726f681177b719","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2700d8d10dd2a7c34ff75c601fbfdda16e83f96b9a1dd2392f726f681177b719\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"576145c34970595258c11ed536f327904a340d543c0f2941856d51ef0549a993","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:16:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:16:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"576145c34970595258c11ed536f327904a340d543c0f2941856d51ef0549a993","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2700d8d10dd2a7c34ff75c601fbfdda16e83f96b9a1dd2392f726f681177b719","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:16:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:16:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2700d8d10dd2a7c34ff75c601fbfdda16e83f96b9a1dd2392f726f681177b719"}
{"level":"info","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/576145c34970595258c11ed536f327904a340d543c0f2941856d51ef0549a993"}
{"level":"info","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fae6a36281b3dc8a4f441265afc865f3e598cce830fb252e1edb26601968e12d"}
{"level":"info","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2700d8d10dd2a7c34ff75c601fbfdda16e83f96b9a1dd2392f726f681177b719","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fae6a36281b3dc8a4f441265afc865f3e598cce830fb252e1edb26601968e12d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:16:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:16:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fae6a36281b3dc8a4f441265afc865f3e598cce830fb252e1edb26601968e12d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e146e7c50085a8a212cabfa9a49f5e82220ecc6c4938fe66d9b01c6db8069854"}
{"level":"info","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/576145c34970595258c11ed536f327904a340d543c0f2941856d51ef0549a993"}
{"level":"info","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2700d8d10dd2a7c34ff75c601fbfdda16e83f96b9a1dd2392f726f681177b719"}
{"level":"info","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fae6a36281b3dc8a4f441265afc865f3e598cce830fb252e1edb26601968e12d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9936b2776ae9e49221e2b2e0ffc413c84fac9c8049fde7f1abb66827d21a3061","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:16:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:16:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9936b2776ae9e49221e2b2e0ffc413c84fac9c8049fde7f1abb66827d21a3061"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aaf4c172da06cc517baefe6a365944c0f3c74abd694620413ba73f63158bf0b"}
{"level":"info","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9936b2776ae9e49221e2b2e0ffc413c84fac9c8049fde7f1abb66827d21a3061","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"576145c34970595258c11ed536f327904a340d543c0f2941856d51ef0549a993","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:16:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:16:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["576145c34970595258c11ed536f327904a340d543c0f2941856d51ef0549a993"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf81e2385491484e1d8de589ec856c81680eed1500b0c8c64b661d3adb0ac159"}
{"level":"info","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"576145c34970595258c11ed536f327904a340d543c0f2941856d51ef0549a993","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e146e7c50085a8a212cabfa9a49f5e82220ecc6c4938fe66d9b01c6db8069854","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:16:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:16:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e146e7c50085a8a212cabfa9a49f5e82220ecc6c4938fe66d9b01c6db8069854"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fae6a36281b3dc8a4f441265afc865f3e598cce830fb252e1edb26601968e12d"}
{"level":"info","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9936b2776ae9e49221e2b2e0ffc413c84fac9c8049fde7f1abb66827d21a3061"}
{"level":"info","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e146e7c50085a8a212cabfa9a49f5e82220ecc6c4938fe66d9b01c6db8069854","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2700d8d10dd2a7c34ff75c601fbfdda16e83f96b9a1dd2392f726f681177b719","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:16:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:16:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2700d8d10dd2a7c34ff75c601fbfdda16e83f96b9a1dd2392f726f681177b719"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f179f927e910e45b6988f63813bc6e4f9ca71d9de901e8410ceaf7d66c7b174a"}
{"level":"info","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7"}
{"level":"info","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/576145c34970595258c11ed536f327904a340d543c0f2941856d51ef0549a993"}
{"level":"info","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2700d8d10dd2a7c34ff75c601fbfdda16e83f96b9a1dd2392f726f681177b719","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aaf4c172da06cc517baefe6a365944c0f3c74abd694620413ba73f63158bf0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:16:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:16:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9aaf4c172da06cc517baefe6a365944c0f3c74abd694620413ba73f63158bf0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78a4b495503cd4c2faabe1caa3cc31e63d83d9be6c55bdd0b9b0f04f6436ac7d"}
{"level":"info","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54a1da46d8582ff570c3a65d9e6d40f481c931660acad7ff530432723bb789fe"}
{"level":"info","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aaf4c172da06cc517baefe6a365944c0f3c74abd694620413ba73f63158bf0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf81e2385491484e1d8de589ec856c81680eed1500b0c8c64b661d3adb0ac159","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:16:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:16:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf81e2385491484e1d8de589ec856c81680eed1500b0c8c64b661d3adb0ac159"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e756008fa6b56137b1b8a2c4ef282cb8907a7486f072e144a73a4fd9e822ae5"}
{"level":"info","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e3102a5a455f148cc0dd9ba5b49615ccb04dd4429e4ac7c82938de77b3c5607"}
{"level":"info","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e146e7c50085a8a212cabfa9a49f5e82220ecc6c4938fe66d9b01c6db8069854"}
{"level":"info","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf81e2385491484e1d8de589ec856c81680eed1500b0c8c64b661d3adb0ac159","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fae6a36281b3dc8a4f441265afc865f3e598cce830fb252e1edb26601968e12d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9936b2776ae9e49221e2b2e0ffc413c84fac9c8049fde7f1abb66827d21a3061","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f179f927e910e45b6988f63813bc6e4f9ca71d9de901e8410ceaf7d66c7b174a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:16:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:16:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f179f927e910e45b6988f63813bc6e4f9ca71d9de901e8410ceaf7d66c7b174a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2700d8d10dd2a7c34ff75c601fbfdda16e83f96b9a1dd2392f726f681177b719"}
{"level":"info","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aaf4c172da06cc517baefe6a365944c0f3c74abd694620413ba73f63158bf0b"}
{"level":"info","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f179f927e910e45b6988f63813bc6e4f9ca71d9de901e8410ceaf7d66c7b174a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:16:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:16:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf81e2385491484e1d8de589ec856c81680eed1500b0c8c64b661d3adb0ac159"}
{"level":"info","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f179f927e910e45b6988f63813bc6e4f9ca71d9de901e8410ceaf7d66c7b174a"}
{"level":"info","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"576145c34970595258c11ed536f327904a340d543c0f2941856d51ef0549a993","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78a4b495503cd4c2faabe1caa3cc31e63d83d9be6c55bdd0b9b0f04f6436ac7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:16:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:16:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78a4b495503cd4c2faabe1caa3cc31e63d83d9be6c55bdd0b9b0f04f6436ac7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7"}
{"level":"info","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78a4b495503cd4c2faabe1caa3cc31e63d83d9be6c55bdd0b9b0f04f6436ac7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54a1da46d8582ff570c3a65d9e6d40f481c931660acad7ff530432723bb789fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:16:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:16:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54a1da46d8582ff570c3a65d9e6d40f481c931660acad7ff530432723bb789fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78a4b495503cd4c2faabe1caa3cc31e63d83d9be6c55bdd0b9b0f04f6436ac7d"}
{"level":"info","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54a1da46d8582ff570c3a65d9e6d40f481c931660acad7ff530432723bb789fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e756008fa6b56137b1b8a2c4ef282cb8907a7486f072e144a73a4fd9e822ae5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:16:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:16:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e756008fa6b56137b1b8a2c4ef282cb8907a7486f072e144a73a4fd9e822ae5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54a1da46d8582ff570c3a65d9e6d40f481c931660acad7ff530432723bb789fe"}
{"level":"info","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e756008fa6b56137b1b8a2c4ef282cb8907a7486f072e144a73a4fd9e822ae5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e3102a5a455f148cc0dd9ba5b49615ccb04dd4429e4ac7c82938de77b3c5607","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:16:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:16:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e3102a5a455f148cc0dd9ba5b49615ccb04dd4429e4ac7c82938de77b3c5607"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e756008fa6b56137b1b8a2c4ef282cb8907a7486f072e144a73a4fd9e822ae5"}
{"level":"info","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e3102a5a455f148cc0dd9ba5b49615ccb04dd4429e4ac7c82938de77b3c5607","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e146e7c50085a8a212cabfa9a49f5e82220ecc6c4938fe66d9b01c6db8069854","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2700d8d10dd2a7c34ff75c601fbfdda16e83f96b9a1dd2392f726f681177b719","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9aaf4c172da06cc517baefe6a365944c0f3c74abd694620413ba73f63158bf0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf81e2385491484e1d8de589ec856c81680eed1500b0c8c64b661d3adb0ac159","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f179f927e910e45b6988f63813bc6e4f9ca71d9de901e8410ceaf7d66c7b174a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78a4b495503cd4c2faabe1caa3cc31e63d83d9be6c55bdd0b9b0f04f6436ac7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54a1da46d8582ff570c3a65d9e6d40f481c931660acad7ff530432723bb789fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e756008fa6b56137b1b8a2c4ef282cb8907a7486f072e144a73a4fd9e822ae5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e3102a5a455f148cc0dd9ba5b49615ccb04dd4429e4ac7c82938de77b3c5607","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:16:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:16:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e3102a5a455f148cc0dd9ba5b49615ccb04dd4429e4ac7c82938de77b3c5607"}
{"level":"info","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e3102a5a455f148cc0dd9ba5b49615ccb04dd4429e4ac7c82938de77b3c5607","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e3102a5a455f148cc0dd9ba5b49615ccb04dd4429e4ac7c82938de77b3c5607","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:16:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:16:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e3102a5a455f148cc0dd9ba5b49615ccb04dd4429e4ac7c82938de77b3c5607"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e3102a5a455f148cc0dd9ba5b49615ccb04dd4429e4ac7c82938de77b3c5607"}
{"level":"info","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e3102a5a455f148cc0dd9ba5b49615ccb04dd4429e4ac7c82938de77b3c5607","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e3102a5a455f148cc0dd9ba5b49615ccb04dd4429e4ac7c82938de77b3c5607","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:16:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:16:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e3102a5a455f148cc0dd9ba5b49615ccb04dd4429e4ac7c82938de77b3c5607"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e3102a5a455f148cc0dd9ba5b49615ccb04dd4429e4ac7c82938de77b3c5607"}
{"level":"error","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2e3102a5a455f148cc0dd9ba5b49615ccb04dd4429e4ac7c82938de77b3c5607","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2e3102a5a455f148cc0dd9ba5b49615ccb04dd4429e4ac7c82938de77b3c5607\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e3102a5a455f148cc0dd9ba5b49615ccb04dd4429e4ac7c82938de77b3c5607","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e3102a5a455f148cc0dd9ba5b49615ccb04dd4429e4ac7c82938de77b3c5607","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aa88b992-10b0-4f7d-be9b-55d8a4afbbef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53570","PortSpecifier":{"PortValue":53570}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aa88b992-10b0-4f7d-be9b-55d8a4afbbef","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aa88b992-10b0-4f7d-be9b-55d8a4afbbef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53570","PortSpecifier":{"PortValue":53570}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784693786,"nanos":600296463},"http":{"id":"aa88b992-10b0-4f7d-be9b-55d8a4afbbef","method":"POST","headers":{":authority":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"aa88b992-10b0-4f7d-be9b-55d8a4afbbef","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aa88b992-10b0-4f7d-be9b-55d8a4afbbef","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"88d523f6-2b3e-4966-9ce1-debf8be3a1cf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=eaea3edd-9c76-456b-b6f4-85607b8e9c74"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e824959af2ef"]}}
{"level":"debug","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aa88b992-10b0-4f7d-be9b-55d8a4afbbef","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e824959af2ef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eaea3edd-9c76-456b-b6f4-85607b8e9c74"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"88d523f6-2b3e-4966-9ce1-debf8be3a1cf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"576145c34970595258c11ed536f327904a340d543c0f2941856d51ef0549a993"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa88b992-10b0-4f7d-be9b-55d8a4afbbef","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa88b992-10b0-4f7d-be9b-55d8a4afbbef","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa88b992-10b0-4f7d-be9b-55d8a4afbbef","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-dd1671/sub-test-model-dd1671\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-dd1671/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"aa88b992-10b0-4f7d-be9b-55d8a4afbbef","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa88b992-10b0-4f7d-be9b-55d8a4afbbef","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa88b992-10b0-4f7d-be9b-55d8a4afbbef","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aa88b992-10b0-4f7d-be9b-55d8a4afbbef","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aa88b992-10b0-4f7d-be9b-55d8a4afbbef","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8bcc3122-29e4-4647-832e-4f8c785a6892","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33410","PortSpecifier":{"PortValue":33410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8bcc3122-29e4-4647-832e-4f8c785a6892","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-38610b.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8bcc3122-29e4-4647-832e-4f8c785a6892","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33410","PortSpecifier":{"PortValue":33410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784693786,"nanos":636212922},"http":{"id":"8bcc3122-29e4-4647-832e-4f8c785a6892","method":"POST","headers":{":authority":"e2e-shared-b-38610b.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8bcc3122-29e4-4647-832e-4f8c785a6892","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8bcc3122-29e4-4647-832e-4f8c785a6892","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"88d523f6-2b3e-4966-9ce1-debf8be3a1cf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=eaea3edd-9c76-456b-b6f4-85607b8e9c74"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e824959af2ef"]}}
{"level":"debug","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8bcc3122-29e4-4647-832e-4f8c785a6892","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e824959af2ef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eaea3edd-9c76-456b-b6f4-85607b8e9c74"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"88d523f6-2b3e-4966-9ce1-debf8be3a1cf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-38610b.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8bcc3122-29e4-4647-832e-4f8c785a6892","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8bcc3122-29e4-4647-832e-4f8c785a6892","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8bcc3122-29e4-4647-832e-4f8c785a6892","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-38610b/sub-test-model-38610b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-38610b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8bcc3122-29e4-4647-832e-4f8c785a6892","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8bcc3122-29e4-4647-832e-4f8c785a6892","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8bcc3122-29e4-4647-832e-4f8c785a6892","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8bcc3122-29e4-4647-832e-4f8c785a6892","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8bcc3122-29e4-4647-832e-4f8c785a6892","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6601c4c-b05a-4268-96fd-77461e490d06","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53584","PortSpecifier":{"PortValue":53584}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d6601c4c-b05a-4268-96fd-77461e490d06","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6601c4c-b05a-4268-96fd-77461e490d06","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53584","PortSpecifier":{"PortValue":53584}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784693786,"nanos":673298068},"http":{"id":"d6601c4c-b05a-4268-96fd-77461e490d06","method":"GET","headers":{":authority":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d6601c4c-b05a-4268-96fd-77461e490d06","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1asgqnV9BYK51lYzs_vMgdUmKJHML0mr3IJZsgzVih58lWSJRJspdKflwj1IB"}
{"level":"debug","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d6601c4c-b05a-4268-96fd-77461e490d06","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1asgqnV9BYK51lYzs_vMgdUmKJHML0mr3IJZsgzVih58lWSJRJspdKflwj1IB\"}"}
{"level":"debug","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d6601c4c-b05a-4268-96fd-77461e490d06","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"86457edb-5ced-4939-a335-3d8b27dfe8ee","keyName":"e2e-sub-iso-cd4599","subscription":"e2e-a-only-dfb3ad","tenant":"e2e-shared-a-dd1671","userId":"86457edb-5ced-4939-a335-3d8b27dfe8ee","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d6601c4c-b05a-4268-96fd-77461e490d06","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6601c4c-b05a-4268-96fd-77461e490d06","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6601c4c-b05a-4268-96fd-77461e490d06","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6601c4c-b05a-4268-96fd-77461e490d06","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-dd1671/sub-test-model-dd1671\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-dd1671/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d6601c4c-b05a-4268-96fd-77461e490d06","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6601c4c-b05a-4268-96fd-77461e490d06","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6601c4c-b05a-4268-96fd-77461e490d06","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-dfb3ad"}
{"level":"debug","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6601c4c-b05a-4268-96fd-77461e490d06","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6601c4c-b05a-4268-96fd-77461e490d06","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6601c4c-b05a-4268-96fd-77461e490d06","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"93f0e66c-f3d5-48a2-9cff-346da818972e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33418","PortSpecifier":{"PortValue":33418}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"93f0e66c-f3d5-48a2-9cff-346da818972e","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-38610b.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"93f0e66c-f3d5-48a2-9cff-346da818972e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33418","PortSpecifier":{"PortValue":33418}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784693786,"nanos":707658658},"http":{"id":"93f0e66c-f3d5-48a2-9cff-346da818972e","method":"GET","headers":{":authority":"e2e-shared-b-38610b.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"93f0e66c-f3d5-48a2-9cff-346da818972e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-REFeyqLBBhJT1782_qPkBqDAoD0xTskHBYgS4IfMrtZDwB0fa49a23D1l84B"}
{"level":"debug","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"93f0e66c-f3d5-48a2-9cff-346da818972e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-38610b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-REFeyqLBBhJT1782_qPkBqDAoD0xTskHBYgS4IfMrtZDwB0fa49a23D1l84B\"}"}
{"level":"debug","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"93f0e66c-f3d5-48a2-9cff-346da818972e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-38610b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b6e54340-9fe8-457c-b9d6-57579baa9438","keyName":"e2e-sub-iso-eca64e","subscription":"e2e-b-only-dfb3ad","tenant":"e2e-shared-b-38610b","userId":"b6e54340-9fe8-457c-b9d6-57579baa9438","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"93f0e66c-f3d5-48a2-9cff-346da818972e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93f0e66c-f3d5-48a2-9cff-346da818972e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93f0e66c-f3d5-48a2-9cff-346da818972e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93f0e66c-f3d5-48a2-9cff-346da818972e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-38610b/sub-test-model-38610b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-38610b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93f0e66c-f3d5-48a2-9cff-346da818972e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"93f0e66c-f3d5-48a2-9cff-346da818972e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93f0e66c-f3d5-48a2-9cff-346da818972e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-dfb3ad"}
{"level":"debug","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93f0e66c-f3d5-48a2-9cff-346da818972e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"93f0e66c-f3d5-48a2-9cff-346da818972e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T04:16:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"93f0e66c-f3d5-48a2-9cff-346da818972e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fce05150-4793-42a5-b533-f69754ac10f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59692","PortSpecifier":{"PortValue":59692}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fce05150-4793-42a5-b533-f69754ac10f7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fce05150-4793-42a5-b533-f69754ac10f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59692","PortSpecifier":{"PortValue":59692}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784693797,"nanos":703461180},"http":{"id":"fce05150-4793-42a5-b533-f69754ac10f7","method":"POST","headers":{":authority":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fce05150-4793-42a5-b533-f69754ac10f7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fce05150-4793-42a5-b533-f69754ac10f7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"88d523f6-2b3e-4966-9ce1-debf8be3a1cf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=eaea3edd-9c76-456b-b6f4-85607b8e9c74"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e824959af2ef"]}}
{"level":"debug","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fce05150-4793-42a5-b533-f69754ac10f7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e824959af2ef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eaea3edd-9c76-456b-b6f4-85607b8e9c74"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"88d523f6-2b3e-4966-9ce1-debf8be3a1cf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"576145c34970595258c11ed536f327904a340d543c0f2941856d51ef0549a993"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fce05150-4793-42a5-b533-f69754ac10f7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fce05150-4793-42a5-b533-f69754ac10f7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fce05150-4793-42a5-b533-f69754ac10f7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-dd1671/sub-test-model-dd1671\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-dd1671/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fce05150-4793-42a5-b533-f69754ac10f7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fce05150-4793-42a5-b533-f69754ac10f7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fce05150-4793-42a5-b533-f69754ac10f7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fce05150-4793-42a5-b533-f69754ac10f7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fce05150-4793-42a5-b533-f69754ac10f7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f2ae36a-931f-42df-931e-b22b4469693f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48290","PortSpecifier":{"PortValue":48290}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6f2ae36a-931f-42df-931e-b22b4469693f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-38610b.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f2ae36a-931f-42df-931e-b22b4469693f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48290","PortSpecifier":{"PortValue":48290}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784693797,"nanos":751008421},"http":{"id":"6f2ae36a-931f-42df-931e-b22b4469693f","method":"POST","headers":{":authority":"e2e-shared-b-38610b.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6f2ae36a-931f-42df-931e-b22b4469693f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6f2ae36a-931f-42df-931e-b22b4469693f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"88d523f6-2b3e-4966-9ce1-debf8be3a1cf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=eaea3edd-9c76-456b-b6f4-85607b8e9c74"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e824959af2ef"]}}
{"level":"debug","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6f2ae36a-931f-42df-931e-b22b4469693f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e824959af2ef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eaea3edd-9c76-456b-b6f4-85607b8e9c74"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"88d523f6-2b3e-4966-9ce1-debf8be3a1cf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-38610b.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f2ae36a-931f-42df-931e-b22b4469693f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f2ae36a-931f-42df-931e-b22b4469693f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f2ae36a-931f-42df-931e-b22b4469693f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-38610b/sub-test-model-38610b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-38610b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6f2ae36a-931f-42df-931e-b22b4469693f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f2ae36a-931f-42df-931e-b22b4469693f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f2ae36a-931f-42df-931e-b22b4469693f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f2ae36a-931f-42df-931e-b22b4469693f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f2ae36a-931f-42df-931e-b22b4469693f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5c22496-4583-426a-bfbb-e52370f2a88a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59704","PortSpecifier":{"PortValue":59704}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b5c22496-4583-426a-bfbb-e52370f2a88a","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5c22496-4583-426a-bfbb-e52370f2a88a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59704","PortSpecifier":{"PortValue":59704}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784693797,"nanos":781040931},"http":{"id":"b5c22496-4583-426a-bfbb-e52370f2a88a","method":"POST","headers":{":authority":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b5c22496-4583-426a-bfbb-e52370f2a88a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-15eoY5UT1uxBsa2T_FCa2d5U64LsL3p2UwcCS1YQuXePg363eYpsKaOkggVV"}
{"level":"debug","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b5c22496-4583-426a-bfbb-e52370f2a88a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-15eoY5UT1uxBsa2T_FCa2d5U64LsL3p2UwcCS1YQuXePg363eYpsKaOkggVV\"}"}
{"level":"debug","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b5c22496-4583-426a-bfbb-e52370f2a88a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"af0e2695-2d85-42d5-b0ed-bb2df52dbba3","keyName":"e2e-sub-iso-b8cce0","subscription":"e2e-shared-sub-e222e6","tenant":"e2e-shared-a-dd1671","userId":"af0e2695-2d85-42d5-b0ed-bb2df52dbba3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b5c22496-4583-426a-bfbb-e52370f2a88a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5c22496-4583-426a-bfbb-e52370f2a88a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5c22496-4583-426a-bfbb-e52370f2a88a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5c22496-4583-426a-bfbb-e52370f2a88a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-dd1671/sub-test-model-dd1671\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-dd1671/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b5c22496-4583-426a-bfbb-e52370f2a88a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5c22496-4583-426a-bfbb-e52370f2a88a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5c22496-4583-426a-bfbb-e52370f2a88a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5c22496-4583-426a-bfbb-e52370f2a88a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-e222e6"}
{"level":"info","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5c22496-4583-426a-bfbb-e52370f2a88a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5c22496-4583-426a-bfbb-e52370f2a88a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a20f165-6380-4ce2-bee4-572a2dac99d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48294","PortSpecifier":{"PortValue":48294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7a20f165-6380-4ce2-bee4-572a2dac99d2","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-38610b.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a20f165-6380-4ce2-bee4-572a2dac99d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48294","PortSpecifier":{"PortValue":48294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784693797,"nanos":805490074},"http":{"id":"7a20f165-6380-4ce2-bee4-572a2dac99d2","method":"POST","headers":{":authority":"e2e-shared-b-38610b.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7a20f165-6380-4ce2-bee4-572a2dac99d2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-19c5MnFT2Lum0dI0N_uq2UIC85C6s4CtaQ2D06aubiqM0AAg46gMMrhCpg3Kd"}
{"level":"debug","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7a20f165-6380-4ce2-bee4-572a2dac99d2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-38610b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-19c5MnFT2Lum0dI0N_uq2UIC85C6s4CtaQ2D06aubiqM0AAg46gMMrhCpg3Kd\"}"}
{"level":"debug","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7a20f165-6380-4ce2-bee4-572a2dac99d2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-38610b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1a080cbb-28b5-4058-b712-58d0bdd9346d","keyName":"e2e-sub-iso-4f41d6","subscription":"e2e-shared-sub-e222e6","tenant":"e2e-shared-b-38610b","userId":"1a080cbb-28b5-4058-b712-58d0bdd9346d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7a20f165-6380-4ce2-bee4-572a2dac99d2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a20f165-6380-4ce2-bee4-572a2dac99d2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a20f165-6380-4ce2-bee4-572a2dac99d2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a20f165-6380-4ce2-bee4-572a2dac99d2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-38610b/sub-test-model-38610b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-38610b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7a20f165-6380-4ce2-bee4-572a2dac99d2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a20f165-6380-4ce2-bee4-572a2dac99d2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a20f165-6380-4ce2-bee4-572a2dac99d2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-e222e6"}
{"level":"debug","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a20f165-6380-4ce2-bee4-572a2dac99d2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a20f165-6380-4ce2-bee4-572a2dac99d2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T04:16:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a20f165-6380-4ce2-bee4-572a2dac99d2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T04:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fae6a36281b3dc8a4f441265afc865f3e598cce830fb252e1edb26601968e12d"}
{"level":"info","ts":"2026-07-22T04:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8578c470dc0c00fd4621a5b1b3ca9d7e6524c72ba7be44c416fc84b3ab99cebc"}
{"level":"info","ts":"2026-07-22T04:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924"}
{"level":"info","ts":"2026-07-22T04:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc3254a41c43f259a823f2f11d7618cfd2a3b3e0593f0fe6c7f0bede67ada570"}
{"level":"info","ts":"2026-07-22T04:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a74141d5f20fba2379d1531e9d6653cd2a1644df9b0c3ec729c0f7503c07af6b"}
{"level":"info","ts":"2026-07-22T04:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2700d8d10dd2a7c34ff75c601fbfdda16e83f96b9a1dd2392f726f681177b719"}
{"level":"info","ts":"2026-07-22T04:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd"}
{"level":"info","ts":"2026-07-22T04:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bf81e2385491484e1d8de589ec856c81680eed1500b0c8c64b661d3adb0ac159"}
{"level":"info","ts":"2026-07-22T04:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/54a1da46d8582ff570c3a65d9e6d40f481c931660acad7ff530432723bb789fe"}
{"level":"info","ts":"2026-07-22T04:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/47d80ad607eea22971ae3cbf602119bc36e13d6af1175acc63b023e7ff570f6d"}
{"level":"info","ts":"2026-07-22T04:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9aaf4c172da06cc517baefe6a365944c0f3c74abd694620413ba73f63158bf0b"}
{"level":"info","ts":"2026-07-22T04:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78a4b495503cd4c2faabe1caa3cc31e63d83d9be6c55bdd0b9b0f04f6436ac7d"}
{"level":"info","ts":"2026-07-22T04:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/42c43479f17f52d6ef8247fb624d3d175b730dabe71467d67b88305e1360c49a"}
{"level":"info","ts":"2026-07-22T04:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e"}
{"level":"info","ts":"2026-07-22T04:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9936b2776ae9e49221e2b2e0ffc413c84fac9c8049fde7f1abb66827d21a3061"}
{"level":"info","ts":"2026-07-22T04:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f179f927e910e45b6988f63813bc6e4f9ca71d9de901e8410ceaf7d66c7b174a"}
{"level":"info","ts":"2026-07-22T04:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d1e3cc110a54858c66776106994db461774f556ba2d1cd9bae2283658310fd03"}
{"level":"info","ts":"2026-07-22T04:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/79cee444b8a5490c425b94e604574e44dcf4f80ae7668b663825169a5dc28e8d"}
{"level":"info","ts":"2026-07-22T04:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7"}
{"level":"info","ts":"2026-07-22T04:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/50a515dbe9c357793897aa10a0a2866717512e7fe822f0b200d6b9b5e6790ba3"}
{"level":"info","ts":"2026-07-22T04:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e756008fa6b56137b1b8a2c4ef282cb8907a7486f072e144a73a4fd9e822ae5"}
{"level":"info","ts":"2026-07-22T04:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e3102a5a455f148cc0dd9ba5b49615ccb04dd4429e4ac7c82938de77b3c5607"}
{"level":"info","ts":"2026-07-22T04:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e146e7c50085a8a212cabfa9a49f5e82220ecc6c4938fe66d9b01c6db8069854"}
{"level":"info","ts":"2026-07-22T04:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/576145c34970595258c11ed536f327904a340d543c0f2941856d51ef0549a993"}
{"level":"debug","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:17:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:17:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180"}
{"level":"debug","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180"}
{"level":"debug","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:17:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:17:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:17:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:17:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:17:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:17:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180"}
{"level":"info","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:17:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:17:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:17:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:17:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e"}
{"level":"info","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:17:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:17:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180"}
{"level":"debug","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:17:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:17:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:17:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:17:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e"}
{"level":"debug","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:17:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:17:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180"}
{"level":"debug","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:17:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:17:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180"}
{"level":"info","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:17:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:17:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:17:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:17:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e"}
{"level":"info","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:17:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:17:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:17:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:17:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180"}
{"level":"info","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5043884044a4d4172d1f5d59705782339b255df6ae5c18f17a6b86b683ef739","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:17:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:17:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e"}
{"level":"info","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5043884044a4d4172d1f5d59705782339b255df6ae5c18f17a6b86b683ef739","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:17:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:17:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5043884044a4d4172d1f5d59705782339b255df6ae5c18f17a6b86b683ef739","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:17:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:17:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5043884044a4d4172d1f5d59705782339b255df6ae5c18f17a6b86b683ef739"}
{"level":"info","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5043884044a4d4172d1f5d59705782339b255df6ae5c18f17a6b86b683ef739","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:17:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:17:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5043884044a4d4172d1f5d59705782339b255df6ae5c18f17a6b86b683ef739","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:17:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:17:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5043884044a4d4172d1f5d59705782339b255df6ae5c18f17a6b86b683ef739"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180"}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5043884044a4d4172d1f5d59705782339b255df6ae5c18f17a6b86b683ef739","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5043884044a4d4172d1f5d59705782339b255df6ae5c18f17a6b86b683ef739","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e"}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5043884044a4d4172d1f5d59705782339b255df6ae5c18f17a6b86b683ef739"}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180"}
{"level":"debug","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924"}
{"level":"debug","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924"}
{"level":"debug","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924"}
{"level":"debug","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924"}
{"level":"debug","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924"}
{"level":"debug","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4db610429cf08a3edcbfc9195a743512bcfa424609d0fd6a1dfdf278b8b99c49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4db610429cf08a3edcbfc9195a743512bcfa424609d0fd6a1dfdf278b8b99c49"}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4db610429cf08a3edcbfc9195a743512bcfa424609d0fd6a1dfdf278b8b99c49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4db610429cf08a3edcbfc9195a743512bcfa424609d0fd6a1dfdf278b8b99c49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4db610429cf08a3edcbfc9195a743512bcfa424609d0fd6a1dfdf278b8b99c49","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4db610429cf08a3edcbfc9195a743512bcfa424609d0fd6a1dfdf278b8b99c49"}
{"level":"debug","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4db610429cf08a3edcbfc9195a743512bcfa424609d0fd6a1dfdf278b8b99c49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4db610429cf08a3edcbfc9195a743512bcfa424609d0fd6a1dfdf278b8b99c49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4db610429cf08a3edcbfc9195a743512bcfa424609d0fd6a1dfdf278b8b99c49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4db610429cf08a3edcbfc9195a743512bcfa424609d0fd6a1dfdf278b8b99c49","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4db610429cf08a3edcbfc9195a743512bcfa424609d0fd6a1dfdf278b8b99c49"}
{"level":"debug","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1022f27ccbab682eacf9ef192085aadc2359e567775f7167dc6611f00e3615ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1022f27ccbab682eacf9ef192085aadc2359e567775f7167dc6611f00e3615ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1022f27ccbab682eacf9ef192085aadc2359e567775f7167dc6611f00e3615ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1022f27ccbab682eacf9ef192085aadc2359e567775f7167dc6611f00e3615ed"}
{"level":"debug","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1022f27ccbab682eacf9ef192085aadc2359e567775f7167dc6611f00e3615ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1022f27ccbab682eacf9ef192085aadc2359e567775f7167dc6611f00e3615ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1022f27ccbab682eacf9ef192085aadc2359e567775f7167dc6611f00e3615ed"}
{"level":"debug","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1022f27ccbab682eacf9ef192085aadc2359e567775f7167dc6611f00e3615ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1022f27ccbab682eacf9ef192085aadc2359e567775f7167dc6611f00e3615ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1022f27ccbab682eacf9ef192085aadc2359e567775f7167dc6611f00e3615ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f12f87990c117828110247838f7dde8e68687f4dbd3c91f0c345be93f1bffd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f12f87990c117828110247838f7dde8e68687f4dbd3c91f0c345be93f1bffd6"}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f12f87990c117828110247838f7dde8e68687f4dbd3c91f0c345be93f1bffd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1022f27ccbab682eacf9ef192085aadc2359e567775f7167dc6611f00e3615ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1022f27ccbab682eacf9ef192085aadc2359e567775f7167dc6611f00e3615ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f12f87990c117828110247838f7dde8e68687f4dbd3c91f0c345be93f1bffd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f12f87990c117828110247838f7dde8e68687f4dbd3c91f0c345be93f1bffd6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1022f27ccbab682eacf9ef192085aadc2359e567775f7167dc6611f00e3615ed"}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f12f87990c117828110247838f7dde8e68687f4dbd3c91f0c345be93f1bffd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1022f27ccbab682eacf9ef192085aadc2359e567775f7167dc6611f00e3615ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1022f27ccbab682eacf9ef192085aadc2359e567775f7167dc6611f00e3615ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1022f27ccbab682eacf9ef192085aadc2359e567775f7167dc6611f00e3615ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f12f87990c117828110247838f7dde8e68687f4dbd3c91f0c345be93f1bffd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f12f87990c117828110247838f7dde8e68687f4dbd3c91f0c345be93f1bffd6"}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f12f87990c117828110247838f7dde8e68687f4dbd3c91f0c345be93f1bffd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1022f27ccbab682eacf9ef192085aadc2359e567775f7167dc6611f00e3615ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1022f27ccbab682eacf9ef192085aadc2359e567775f7167dc6611f00e3615ed"}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1022f27ccbab682eacf9ef192085aadc2359e567775f7167dc6611f00e3615ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f12f87990c117828110247838f7dde8e68687f4dbd3c91f0c345be93f1bffd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1022f27ccbab682eacf9ef192085aadc2359e567775f7167dc6611f00e3615ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1022f27ccbab682eacf9ef192085aadc2359e567775f7167dc6611f00e3615ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1022f27ccbab682eacf9ef192085aadc2359e567775f7167dc6611f00e3615ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f12f87990c117828110247838f7dde8e68687f4dbd3c91f0c345be93f1bffd6"}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f12f87990c117828110247838f7dde8e68687f4dbd3c91f0c345be93f1bffd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f12f87990c117828110247838f7dde8e68687f4dbd3c91f0c345be93f1bffd6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f12f87990c117828110247838f7dde8e68687f4dbd3c91f0c345be93f1bffd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1022f27ccbab682eacf9ef192085aadc2359e567775f7167dc6611f00e3615ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1022f27ccbab682eacf9ef192085aadc2359e567775f7167dc6611f00e3615ed"}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1022f27ccbab682eacf9ef192085aadc2359e567775f7167dc6611f00e3615ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd"}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f12f87990c117828110247838f7dde8e68687f4dbd3c91f0c345be93f1bffd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f12f87990c117828110247838f7dde8e68687f4dbd3c91f0c345be93f1bffd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1022f27ccbab682eacf9ef192085aadc2359e567775f7167dc6611f00e3615ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1022f27ccbab682eacf9ef192085aadc2359e567775f7167dc6611f00e3615ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f12f87990c117828110247838f7dde8e68687f4dbd3c91f0c345be93f1bffd6"}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1022f27ccbab682eacf9ef192085aadc2359e567775f7167dc6611f00e3615ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f12f87990c117828110247838f7dde8e68687f4dbd3c91f0c345be93f1bffd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f12f87990c117828110247838f7dde8e68687f4dbd3c91f0c345be93f1bffd6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1022f27ccbab682eacf9ef192085aadc2359e567775f7167dc6611f00e3615ed"}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f12f87990c117828110247838f7dde8e68687f4dbd3c91f0c345be93f1bffd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1022f27ccbab682eacf9ef192085aadc2359e567775f7167dc6611f00e3615ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd"}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f12f87990c117828110247838f7dde8e68687f4dbd3c91f0c345be93f1bffd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f12f87990c117828110247838f7dde8e68687f4dbd3c91f0c345be93f1bffd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f12f87990c117828110247838f7dde8e68687f4dbd3c91f0c345be93f1bffd6"}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f12f87990c117828110247838f7dde8e68687f4dbd3c91f0c345be93f1bffd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f12f87990c117828110247838f7dde8e68687f4dbd3c91f0c345be93f1bffd6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f12f87990c117828110247838f7dde8e68687f4dbd3c91f0c345be93f1bffd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f12f87990c117828110247838f7dde8e68687f4dbd3c91f0c345be93f1bffd6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1022f27ccbab682eacf9ef192085aadc2359e567775f7167dc6611f00e3615ed"}
{"level":"debug","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb4ea2ca4a782fd5f5702632fd1371cb9d1b68d1fb1505c1290d70ab31c6d21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb4ea2ca4a782fd5f5702632fd1371cb9d1b68d1fb1505c1290d70ab31c6d21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb4ea2ca4a782fd5f5702632fd1371cb9d1b68d1fb1505c1290d70ab31c6d21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb4ea2ca4a782fd5f5702632fd1371cb9d1b68d1fb1505c1290d70ab31c6d21","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd"}
{"level":"debug","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb4ea2ca4a782fd5f5702632fd1371cb9d1b68d1fb1505c1290d70ab31c6d21","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f12f87990c117828110247838f7dde8e68687f4dbd3c91f0c345be93f1bffd6"}
{"level":"info","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb4ea2ca4a782fd5f5702632fd1371cb9d1b68d1fb1505c1290d70ab31c6d21"}
{"level":"debug","ts":"2026-07-22T04:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb4ea2ca4a782fd5f5702632fd1371cb9d1b68d1fb1505c1290d70ab31c6d21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:17:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbb4ea2ca4a782fd5f5702632fd1371cb9d1b68d1fb1505c1290d70ab31c6d21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb4ea2ca4a782fd5f5702632fd1371cb9d1b68d1fb1505c1290d70ab31c6d21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb4ea2ca4a782fd5f5702632fd1371cb9d1b68d1fb1505c1290d70ab31c6d21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"576145c34970595258c11ed536f327904a340d543c0f2941856d51ef0549a993","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:17:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:17:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"576145c34970595258c11ed536f327904a340d543c0f2941856d51ef0549a993","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"576145c34970595258c11ed536f327904a340d543c0f2941856d51ef0549a993","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"576145c34970595258c11ed536f327904a340d543c0f2941856d51ef0549a993","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb4ea2ca4a782fd5f5702632fd1371cb9d1b68d1fb1505c1290d70ab31c6d21"}
{"level":"debug","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"576145c34970595258c11ed536f327904a340d543c0f2941856d51ef0549a993","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:17:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:17:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/576145c34970595258c11ed536f327904a340d543c0f2941856d51ef0549a993"}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"576145c34970595258c11ed536f327904a340d543c0f2941856d51ef0549a993","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"576145c34970595258c11ed536f327904a340d543c0f2941856d51ef0549a993","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:17:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:17:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["576145c34970595258c11ed536f327904a340d543c0f2941856d51ef0549a993"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"576145c34970595258c11ed536f327904a340d543c0f2941856d51ef0549a993","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"576145c34970595258c11ed536f327904a340d543c0f2941856d51ef0549a993","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:17:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:17:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/576145c34970595258c11ed536f327904a340d543c0f2941856d51ef0549a993"}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"576145c34970595258c11ed536f327904a340d543c0f2941856d51ef0549a993","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"576145c34970595258c11ed536f327904a340d543c0f2941856d51ef0549a993","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"576145c34970595258c11ed536f327904a340d543c0f2941856d51ef0549a993","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7d6c5035e6354100e79221640eb49ea014590480803283cca6af3e9ee8109ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:17:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:17:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/576145c34970595258c11ed536f327904a340d543c0f2941856d51ef0549a993"}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7d6c5035e6354100e79221640eb49ea014590480803283cca6af3e9ee8109ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7d6c5035e6354100e79221640eb49ea014590480803283cca6af3e9ee8109ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:17:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:17:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7d6c5035e6354100e79221640eb49ea014590480803283cca6af3e9ee8109ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"576145c34970595258c11ed536f327904a340d543c0f2941856d51ef0549a993","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:17:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:17:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["576145c34970595258c11ed536f327904a340d543c0f2941856d51ef0549a993"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7d6c5035e6354100e79221640eb49ea014590480803283cca6af3e9ee8109ee"}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"576145c34970595258c11ed536f327904a340d543c0f2941856d51ef0549a993","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7d6c5035e6354100e79221640eb49ea014590480803283cca6af3e9ee8109ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:17:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:17:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7d6c5035e6354100e79221640eb49ea014590480803283cca6af3e9ee8109ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7d6c5035e6354100e79221640eb49ea014590480803283cca6af3e9ee8109ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"576145c34970595258c11ed536f327904a340d543c0f2941856d51ef0549a993","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:17:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:17:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/576145c34970595258c11ed536f327904a340d543c0f2941856d51ef0549a993"}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"576145c34970595258c11ed536f327904a340d543c0f2941856d51ef0549a993","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7d6c5035e6354100e79221640eb49ea014590480803283cca6af3e9ee8109ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:17:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:17:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7d6c5035e6354100e79221640eb49ea014590480803283cca6af3e9ee8109ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"576145c34970595258c11ed536f327904a340d543c0f2941856d51ef0549a993","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:17:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:17:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["576145c34970595258c11ed536f327904a340d543c0f2941856d51ef0549a993"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7d6c5035e6354100e79221640eb49ea014590480803283cca6af3e9ee8109ee"}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"576145c34970595258c11ed536f327904a340d543c0f2941856d51ef0549a993","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:17:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:17:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/576145c34970595258c11ed536f327904a340d543c0f2941856d51ef0549a993"}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7"}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7d6c5035e6354100e79221640eb49ea014590480803283cca6af3e9ee8109ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:17:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:17:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7d6c5035e6354100e79221640eb49ea014590480803283cca6af3e9ee8109ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67c5de7fd2997faafad11d668a8e97a34e1b3d416304fd5f20d877329df536a3"}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7d6c5035e6354100e79221640eb49ea014590480803283cca6af3e9ee8109ee"}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7d6c5035e6354100e79221640eb49ea014590480803283cca6af3e9ee8109ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67c5de7fd2997faafad11d668a8e97a34e1b3d416304fd5f20d877329df536a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:17:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:17:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67c5de7fd2997faafad11d668a8e97a34e1b3d416304fd5f20d877329df536a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/576145c34970595258c11ed536f327904a340d543c0f2941856d51ef0549a993"}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67c5de7fd2997faafad11d668a8e97a34e1b3d416304fd5f20d877329df536a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"576145c34970595258c11ed536f327904a340d543c0f2941856d51ef0549a993","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"556acf23f2d24ddffd0caf20ec2097f2d4d36d0a4cd9adb8b423eaacb6f73be3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:17:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:17:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/556acf23f2d24ddffd0caf20ec2097f2d4d36d0a4cd9adb8b423eaacb6f73be3"}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7"}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33f564be7d5eae36ca428274803831c71f6ea9d65bdb784ff45927c9737010aa"}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"556acf23f2d24ddffd0caf20ec2097f2d4d36d0a4cd9adb8b423eaacb6f73be3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:17:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:17:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da0c0678ced36e288ac208f27e038c966afd5ffbdb6355e6676a5648f6f7bc70"}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33f564be7d5eae36ca428274803831c71f6ea9d65bdb784ff45927c9737010aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:17:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:17:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33f564be7d5eae36ca428274803831c71f6ea9d65bdb784ff45927c9737010aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1e3cc110a54858c66776106994db461774f556ba2d1cd9bae2283658310fd03"}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7d6c5035e6354100e79221640eb49ea014590480803283cca6af3e9ee8109ee"}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33f564be7d5eae36ca428274803831c71f6ea9d65bdb784ff45927c9737010aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da0c0678ced36e288ac208f27e038c966afd5ffbdb6355e6676a5648f6f7bc70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:17:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:17:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da0c0678ced36e288ac208f27e038c966afd5ffbdb6355e6676a5648f6f7bc70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2cb8eddf3c434c9d6c300aa8afbbfcb692d8f268f0c1c3f13f2be318f985b7f"}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e4e547a3859d4dd5d555a844fd33d6b5ec8b386579f0b64b662b8f77ae88505"}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da0c0678ced36e288ac208f27e038c966afd5ffbdb6355e6676a5648f6f7bc70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1e3cc110a54858c66776106994db461774f556ba2d1cd9bae2283658310fd03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:17:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:17:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1e3cc110a54858c66776106994db461774f556ba2d1cd9bae2283658310fd03"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67c5de7fd2997faafad11d668a8e97a34e1b3d416304fd5f20d877329df536a3"}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6c4263b7d009c59fdaebe51f1d66d37443e4a842062d380455c28afa0a911b4"}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aaf4c172da06cc517baefe6a365944c0f3c74abd694620413ba73f63158bf0b"}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1e3cc110a54858c66776106994db461774f556ba2d1cd9bae2283658310fd03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7d6c5035e6354100e79221640eb49ea014590480803283cca6af3e9ee8109ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2cb8eddf3c434c9d6c300aa8afbbfcb692d8f268f0c1c3f13f2be318f985b7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:17:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:17:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2cb8eddf3c434c9d6c300aa8afbbfcb692d8f268f0c1c3f13f2be318f985b7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/556acf23f2d24ddffd0caf20ec2097f2d4d36d0a4cd9adb8b423eaacb6f73be3"}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a267dbb0e309ba697be92b03645e7fb5ed1839151170f15a7193247a81245df"}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2cb8eddf3c434c9d6c300aa8afbbfcb692d8f268f0c1c3f13f2be318f985b7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e4e547a3859d4dd5d555a844fd33d6b5ec8b386579f0b64b662b8f77ae88505","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:17:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:17:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e4e547a3859d4dd5d555a844fd33d6b5ec8b386579f0b64b662b8f77ae88505"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7"}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b93807c3545ed26cc82b3c2644a5b056f4db5c948a4dc9b0646587071a3a6783"}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e4e547a3859d4dd5d555a844fd33d6b5ec8b386579f0b64b662b8f77ae88505","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67c5de7fd2997faafad11d668a8e97a34e1b3d416304fd5f20d877329df536a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6c4263b7d009c59fdaebe51f1d66d37443e4a842062d380455c28afa0a911b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:17:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:17:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d6c4263b7d009c59fdaebe51f1d66d37443e4a842062d380455c28afa0a911b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc3254a41c43f259a823f2f11d7618cfd2a3b3e0593f0fe6c7f0bede67ada570"}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33f564be7d5eae36ca428274803831c71f6ea9d65bdb784ff45927c9737010aa"}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6c4263b7d009c59fdaebe51f1d66d37443e4a842062d380455c28afa0a911b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aaf4c172da06cc517baefe6a365944c0f3c74abd694620413ba73f63158bf0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:17:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:17:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9aaf4c172da06cc517baefe6a365944c0f3c74abd694620413ba73f63158bf0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da0c0678ced36e288ac208f27e038c966afd5ffbdb6355e6676a5648f6f7bc70"}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1e3cc110a54858c66776106994db461774f556ba2d1cd9bae2283658310fd03"}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aaf4c172da06cc517baefe6a365944c0f3c74abd694620413ba73f63158bf0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"556acf23f2d24ddffd0caf20ec2097f2d4d36d0a4cd9adb8b423eaacb6f73be3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:17:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:17:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["556acf23f2d24ddffd0caf20ec2097f2d4d36d0a4cd9adb8b423eaacb6f73be3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2cb8eddf3c434c9d6c300aa8afbbfcb692d8f268f0c1c3f13f2be318f985b7f"}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e4e547a3859d4dd5d555a844fd33d6b5ec8b386579f0b64b662b8f77ae88505"}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6c4263b7d009c59fdaebe51f1d66d37443e4a842062d380455c28afa0a911b4"}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"556acf23f2d24ddffd0caf20ec2097f2d4d36d0a4cd9adb8b423eaacb6f73be3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a267dbb0e309ba697be92b03645e7fb5ed1839151170f15a7193247a81245df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:17:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:17:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a267dbb0e309ba697be92b03645e7fb5ed1839151170f15a7193247a81245df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aaf4c172da06cc517baefe6a365944c0f3c74abd694620413ba73f63158bf0b"}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/556acf23f2d24ddffd0caf20ec2097f2d4d36d0a4cd9adb8b423eaacb6f73be3"}
{"level":"info","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a267dbb0e309ba697be92b03645e7fb5ed1839151170f15a7193247a81245df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b93807c3545ed26cc82b3c2644a5b056f4db5c948a4dc9b0646587071a3a6783","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:17:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:17:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b93807c3545ed26cc82b3c2644a5b056f4db5c948a4dc9b0646587071a3a6783"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a267dbb0e309ba697be92b03645e7fb5ed1839151170f15a7193247a81245df"}
{"level":"info","ts":"2026-07-22T04:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b93807c3545ed26cc82b3c2644a5b056f4db5c948a4dc9b0646587071a3a6783","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc3254a41c43f259a823f2f11d7618cfd2a3b3e0593f0fe6c7f0bede67ada570","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:17:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:17:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc3254a41c43f259a823f2f11d7618cfd2a3b3e0593f0fe6c7f0bede67ada570"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b93807c3545ed26cc82b3c2644a5b056f4db5c948a4dc9b0646587071a3a6783"}
{"level":"info","ts":"2026-07-22T04:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc3254a41c43f259a823f2f11d7618cfd2a3b3e0593f0fe6c7f0bede67ada570","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33f564be7d5eae36ca428274803831c71f6ea9d65bdb784ff45927c9737010aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da0c0678ced36e288ac208f27e038c966afd5ffbdb6355e6676a5648f6f7bc70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1e3cc110a54858c66776106994db461774f556ba2d1cd9bae2283658310fd03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2cb8eddf3c434c9d6c300aa8afbbfcb692d8f268f0c1c3f13f2be318f985b7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e4e547a3859d4dd5d555a844fd33d6b5ec8b386579f0b64b662b8f77ae88505","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6c4263b7d009c59fdaebe51f1d66d37443e4a842062d380455c28afa0a911b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9aaf4c172da06cc517baefe6a365944c0f3c74abd694620413ba73f63158bf0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"556acf23f2d24ddffd0caf20ec2097f2d4d36d0a4cd9adb8b423eaacb6f73be3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a267dbb0e309ba697be92b03645e7fb5ed1839151170f15a7193247a81245df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b93807c3545ed26cc82b3c2644a5b056f4db5c948a4dc9b0646587071a3a6783","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc3254a41c43f259a823f2f11d7618cfd2a3b3e0593f0fe6c7f0bede67ada570","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T04:17:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T04:17:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc3254a41c43f259a823f2f11d7618cfd2a3b3e0593f0fe6c7f0bede67ada570"}
{"level":"info","ts":"2026-07-22T04:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc3254a41c43f259a823f2f11d7618cfd2a3b3e0593f0fe6c7f0bede67ada570","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc3254a41c43f259a823f2f11d7618cfd2a3b3e0593f0fe6c7f0bede67ada570","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:17:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:17:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc3254a41c43f259a823f2f11d7618cfd2a3b3e0593f0fe6c7f0bede67ada570"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc3254a41c43f259a823f2f11d7618cfd2a3b3e0593f0fe6c7f0bede67ada570"}
{"level":"info","ts":"2026-07-22T04:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc3254a41c43f259a823f2f11d7618cfd2a3b3e0593f0fe6c7f0bede67ada570","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc3254a41c43f259a823f2f11d7618cfd2a3b3e0593f0fe6c7f0bede67ada570","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T04:17:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T04:17:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc3254a41c43f259a823f2f11d7618cfd2a3b3e0593f0fe6c7f0bede67ada570"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T04:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc3254a41c43f259a823f2f11d7618cfd2a3b3e0593f0fe6c7f0bede67ada570"}
{"level":"error","ts":"2026-07-22T04:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cc3254a41c43f259a823f2f11d7618cfd2a3b3e0593f0fe6c7f0bede67ada570","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cc3254a41c43f259a823f2f11d7618cfd2a3b3e0593f0fe6c7f0bede67ada570\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T04:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc3254a41c43f259a823f2f11d7618cfd2a3b3e0593f0fe6c7f0bede67ada570","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T04:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc3254a41c43f259a823f2f11d7618cfd2a3b3e0593f0fe6c7f0bede67ada570","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T04:17:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25b8311f-8c94-424c-b8a7-3ef85f1218f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46684","PortSpecifier":{"PortValue":46684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"25b8311f-8c94-424c-b8a7-3ef85f1218f0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T04:17:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25b8311f-8c94-424c-b8a7-3ef85f1218f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46684","PortSpecifier":{"PortValue":46684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784693866,"nanos":467133433},"http":{"id":"25b8311f-8c94-424c-b8a7-3ef85f1218f0","method":"POST","headers":{":authority":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:17:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"25b8311f-8c94-424c-b8a7-3ef85f1218f0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T04:17:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"25b8311f-8c94-424c-b8a7-3ef85f1218f0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"88d523f6-2b3e-4966-9ce1-debf8be3a1cf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=eaea3edd-9c76-456b-b6f4-85607b8e9c74"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e824959af2ef"]}}
{"level":"debug","ts":"2026-07-22T04:17:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"25b8311f-8c94-424c-b8a7-3ef85f1218f0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e824959af2ef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eaea3edd-9c76-456b-b6f4-85607b8e9c74"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"88d523f6-2b3e-4966-9ce1-debf8be3a1cf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"576145c34970595258c11ed536f327904a340d543c0f2941856d51ef0549a993"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:17:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25b8311f-8c94-424c-b8a7-3ef85f1218f0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:17:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25b8311f-8c94-424c-b8a7-3ef85f1218f0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:17:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25b8311f-8c94-424c-b8a7-3ef85f1218f0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-dd1671/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:17:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"25b8311f-8c94-424c-b8a7-3ef85f1218f0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T04:17:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25b8311f-8c94-424c-b8a7-3ef85f1218f0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T04:17:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25b8311f-8c94-424c-b8a7-3ef85f1218f0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T04:17:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25b8311f-8c94-424c-b8a7-3ef85f1218f0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T04:17:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25b8311f-8c94-424c-b8a7-3ef85f1218f0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T04:17:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c2b5096-bc5b-4e12-a352-f47005aa6e1f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60938","PortSpecifier":{"PortValue":60938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9c2b5096-bc5b-4e12-a352-f47005aa6e1f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-38610b.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T04:17:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c2b5096-bc5b-4e12-a352-f47005aa6e1f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60938","PortSpecifier":{"PortValue":60938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784693866,"nanos":509078367},"http":{"id":"9c2b5096-bc5b-4e12-a352-f47005aa6e1f","method":"POST","headers":{":authority":"e2e-shared-b-38610b.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:17:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9c2b5096-bc5b-4e12-a352-f47005aa6e1f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T04:17:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9c2b5096-bc5b-4e12-a352-f47005aa6e1f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"88d523f6-2b3e-4966-9ce1-debf8be3a1cf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=eaea3edd-9c76-456b-b6f4-85607b8e9c74"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e824959af2ef"]}}
{"level":"debug","ts":"2026-07-22T04:17:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9c2b5096-bc5b-4e12-a352-f47005aa6e1f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e824959af2ef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eaea3edd-9c76-456b-b6f4-85607b8e9c74"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"88d523f6-2b3e-4966-9ce1-debf8be3a1cf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-38610b.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:17:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c2b5096-bc5b-4e12-a352-f47005aa6e1f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:17:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c2b5096-bc5b-4e12-a352-f47005aa6e1f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:17:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c2b5096-bc5b-4e12-a352-f47005aa6e1f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-38610b/rate-test-model-38610b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-38610b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:17:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9c2b5096-bc5b-4e12-a352-f47005aa6e1f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T04:17:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c2b5096-bc5b-4e12-a352-f47005aa6e1f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T04:17:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c2b5096-bc5b-4e12-a352-f47005aa6e1f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T04:17:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c2b5096-bc5b-4e12-a352-f47005aa6e1f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T04:17:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c2b5096-bc5b-4e12-a352-f47005aa6e1f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T04:17:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e8c0ca5-8f85-4ece-b28c-65f19fa5c49b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46694","PortSpecifier":{"PortValue":46694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8e8c0ca5-8f85-4ece-b28c-65f19fa5c49b","method":"POST","path":"/ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671/v1/completions","host":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T04:17:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e8c0ca5-8f85-4ece-b28c-65f19fa5c49b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46694","PortSpecifier":{"PortValue":46694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784693866,"nanos":560532429},"http":{"id":"8e8c0ca5-8f85-4ece-b28c-65f19fa5c49b","method":"POST","headers":{":authority":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:17:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8e8c0ca5-8f85-4ece-b28c-65f19fa5c49b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1T1v0P4eeGYvlcC4w_vxcsrqTeanRfV0uMOq7qx8jwwCqusaJv8QhRVTxQnPh"}
{"level":"debug","ts":"2026-07-22T04:17:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8e8c0ca5-8f85-4ece-b28c-65f19fa5c49b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1T1v0P4eeGYvlcC4w_vxcsrqTeanRfV0uMOq7qx8jwwCqusaJv8QhRVTxQnPh\"}"}
{"level":"debug","ts":"2026-07-22T04:17:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8e8c0ca5-8f85-4ece-b28c-65f19fa5c49b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"56562447-2c91-4b49-81a5-9110b3325312","keyName":"e2e-rate-a-72f9a9","subscription":"e2e-rate-iso-a-72f9a9","tenant":"e2e-shared-a-dd1671","userId":"56562447-2c91-4b49-81a5-9110b3325312","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T04:17:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8e8c0ca5-8f85-4ece-b28c-65f19fa5c49b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671\",\"requestedSubscription\":\"e2e-rate-iso-a-72f9a9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T04:17:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8e8c0ca5-8f85-4ece-b28c-65f19fa5c49b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-dd1671","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-72f9a9","namespace":"ai-tenant-e2e-shared-a-dd1671","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671"}}
{"level":"debug","ts":"2026-07-22T04:17:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8e8c0ca5-8f85-4ece-b28c-65f19fa5c49b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:17:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e8c0ca5-8f85-4ece-b28c-65f19fa5c49b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:17:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e8c0ca5-8f85-4ece-b28c-65f19fa5c49b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:17:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e8c0ca5-8f85-4ece-b28c-65f19fa5c49b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:17:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e8c0ca5-8f85-4ece-b28c-65f19fa5c49b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-dd1671/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:17:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e8c0ca5-8f85-4ece-b28c-65f19fa5c49b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T04:17:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e8c0ca5-8f85-4ece-b28c-65f19fa5c49b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T04:17:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e8c0ca5-8f85-4ece-b28c-65f19fa5c49b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-72f9a9"}
{"level":"debug","ts":"2026-07-22T04:17:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e8c0ca5-8f85-4ece-b28c-65f19fa5c49b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"56562447-2c91-4b49-81a5-9110b3325312","keyName":"e2e-rate-a-72f9a9","selected_subscription":"e2e-rate-iso-a-72f9a9","selected_subscription_key":"ai-tenant-e2e-shared-a-dd1671/e2e-rate-iso-a-72f9a9@ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-dd1671","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-72f9a9","namespace":"ai-tenant-e2e-shared-a-dd1671","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T04:17:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e8c0ca5-8f85-4ece-b28c-65f19fa5c49b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T04:17:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e8c0ca5-8f85-4ece-b28c-65f19fa5c49b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T04:17:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d260fb09-c55b-479f-93e8-75558268997f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46706","PortSpecifier":{"PortValue":46706}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d260fb09-c55b-479f-93e8-75558268997f","method":"POST","path":"/ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671/v1/completions","host":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T04:17:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d260fb09-c55b-479f-93e8-75558268997f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46706","PortSpecifier":{"PortValue":46706}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784693867,"nanos":651740287},"http":{"id":"d260fb09-c55b-479f-93e8-75558268997f","method":"POST","headers":{":authority":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:17:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d260fb09-c55b-479f-93e8-75558268997f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1T1v0P4eeGYvlcC4w_vxcsrqTeanRfV0uMOq7qx8jwwCqusaJv8QhRVTxQnPh"}
{"level":"debug","ts":"2026-07-22T04:17:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d260fb09-c55b-479f-93e8-75558268997f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1T1v0P4eeGYvlcC4w_vxcsrqTeanRfV0uMOq7qx8jwwCqusaJv8QhRVTxQnPh\"}"}
{"level":"debug","ts":"2026-07-22T04:17:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d260fb09-c55b-479f-93e8-75558268997f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"56562447-2c91-4b49-81a5-9110b3325312","keyName":"e2e-rate-a-72f9a9","subscription":"e2e-rate-iso-a-72f9a9","tenant":"e2e-shared-a-dd1671","userId":"56562447-2c91-4b49-81a5-9110b3325312","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T04:17:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d260fb09-c55b-479f-93e8-75558268997f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671\",\"requestedSubscription\":\"e2e-rate-iso-a-72f9a9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T04:17:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d260fb09-c55b-479f-93e8-75558268997f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-dd1671","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-72f9a9","namespace":"ai-tenant-e2e-shared-a-dd1671","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671"}}
{"level":"debug","ts":"2026-07-22T04:17:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d260fb09-c55b-479f-93e8-75558268997f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:17:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d260fb09-c55b-479f-93e8-75558268997f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:17:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d260fb09-c55b-479f-93e8-75558268997f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:17:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d260fb09-c55b-479f-93e8-75558268997f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-dd1671/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:17:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d260fb09-c55b-479f-93e8-75558268997f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:17:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d260fb09-c55b-479f-93e8-75558268997f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T04:17:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d260fb09-c55b-479f-93e8-75558268997f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-72f9a9"}
{"level":"debug","ts":"2026-07-22T04:17:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d260fb09-c55b-479f-93e8-75558268997f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T04:17:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d260fb09-c55b-479f-93e8-75558268997f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"56562447-2c91-4b49-81a5-9110b3325312","keyName":"e2e-rate-a-72f9a9","selected_subscription":"e2e-rate-iso-a-72f9a9","selected_subscription_key":"ai-tenant-e2e-shared-a-dd1671/e2e-rate-iso-a-72f9a9@ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-dd1671","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-72f9a9","namespace":"ai-tenant-e2e-shared-a-dd1671","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T04:17:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d260fb09-c55b-479f-93e8-75558268997f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T04:17:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d260fb09-c55b-479f-93e8-75558268997f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T04:17:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5bcd9c4-0a2f-4cd1-b242-50cc1e9f3098","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46710","PortSpecifier":{"PortValue":46710}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c5bcd9c4-0a2f-4cd1-b242-50cc1e9f3098","method":"POST","path":"/ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671/v1/completions","host":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T04:17:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5bcd9c4-0a2f-4cd1-b242-50cc1e9f3098","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46710","PortSpecifier":{"PortValue":46710}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784693868,"nanos":691275997},"http":{"id":"c5bcd9c4-0a2f-4cd1-b242-50cc1e9f3098","method":"POST","headers":{":authority":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:17:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c5bcd9c4-0a2f-4cd1-b242-50cc1e9f3098","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1T1v0P4eeGYvlcC4w_vxcsrqTeanRfV0uMOq7qx8jwwCqusaJv8QhRVTxQnPh"}
{"level":"debug","ts":"2026-07-22T04:17:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c5bcd9c4-0a2f-4cd1-b242-50cc1e9f3098","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1T1v0P4eeGYvlcC4w_vxcsrqTeanRfV0uMOq7qx8jwwCqusaJv8QhRVTxQnPh\"}"}
{"level":"debug","ts":"2026-07-22T04:17:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c5bcd9c4-0a2f-4cd1-b242-50cc1e9f3098","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"56562447-2c91-4b49-81a5-9110b3325312","keyName":"e2e-rate-a-72f9a9","subscription":"e2e-rate-iso-a-72f9a9","tenant":"e2e-shared-a-dd1671","userId":"56562447-2c91-4b49-81a5-9110b3325312","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T04:17:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c5bcd9c4-0a2f-4cd1-b242-50cc1e9f3098","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671\",\"requestedSubscription\":\"e2e-rate-iso-a-72f9a9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T04:17:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c5bcd9c4-0a2f-4cd1-b242-50cc1e9f3098","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-dd1671","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-72f9a9","namespace":"ai-tenant-e2e-shared-a-dd1671","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671"}}
{"level":"debug","ts":"2026-07-22T04:17:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c5bcd9c4-0a2f-4cd1-b242-50cc1e9f3098","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:17:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5bcd9c4-0a2f-4cd1-b242-50cc1e9f3098","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:17:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5bcd9c4-0a2f-4cd1-b242-50cc1e9f3098","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:17:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5bcd9c4-0a2f-4cd1-b242-50cc1e9f3098","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:17:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5bcd9c4-0a2f-4cd1-b242-50cc1e9f3098","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-dd1671/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:17:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5bcd9c4-0a2f-4cd1-b242-50cc1e9f3098","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T04:17:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5bcd9c4-0a2f-4cd1-b242-50cc1e9f3098","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-72f9a9"}
{"level":"debug","ts":"2026-07-22T04:17:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5bcd9c4-0a2f-4cd1-b242-50cc1e9f3098","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T04:17:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5bcd9c4-0a2f-4cd1-b242-50cc1e9f3098","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"56562447-2c91-4b49-81a5-9110b3325312","keyName":"e2e-rate-a-72f9a9","selected_subscription":"e2e-rate-iso-a-72f9a9","selected_subscription_key":"ai-tenant-e2e-shared-a-dd1671/e2e-rate-iso-a-72f9a9@ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-dd1671","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-72f9a9","namespace":"ai-tenant-e2e-shared-a-dd1671","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T04:17:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5bcd9c4-0a2f-4cd1-b242-50cc1e9f3098","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T04:17:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5bcd9c4-0a2f-4cd1-b242-50cc1e9f3098","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T04:17:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f5b95362-c5e7-47ac-ae03-affaa7a80cfc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40988","PortSpecifier":{"PortValue":40988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f5b95362-c5e7-47ac-ae03-affaa7a80cfc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T04:17:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f5b95362-c5e7-47ac-ae03-affaa7a80cfc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40988","PortSpecifier":{"PortValue":40988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784693877,"nanos":413165736},"http":{"id":"f5b95362-c5e7-47ac-ae03-affaa7a80cfc","method":"POST","headers":{":authority":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:17:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f5b95362-c5e7-47ac-ae03-affaa7a80cfc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T04:17:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f5b95362-c5e7-47ac-ae03-affaa7a80cfc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"88d523f6-2b3e-4966-9ce1-debf8be3a1cf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=eaea3edd-9c76-456b-b6f4-85607b8e9c74"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e824959af2ef"]}}
{"level":"debug","ts":"2026-07-22T04:17:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f5b95362-c5e7-47ac-ae03-affaa7a80cfc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e824959af2ef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eaea3edd-9c76-456b-b6f4-85607b8e9c74"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"88d523f6-2b3e-4966-9ce1-debf8be3a1cf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"576145c34970595258c11ed536f327904a340d543c0f2941856d51ef0549a993"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:17:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f5b95362-c5e7-47ac-ae03-affaa7a80cfc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:17:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f5b95362-c5e7-47ac-ae03-affaa7a80cfc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:17:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f5b95362-c5e7-47ac-ae03-affaa7a80cfc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-dd1671/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:17:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f5b95362-c5e7-47ac-ae03-affaa7a80cfc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T04:17:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f5b95362-c5e7-47ac-ae03-affaa7a80cfc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T04:17:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f5b95362-c5e7-47ac-ae03-affaa7a80cfc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T04:17:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f5b95362-c5e7-47ac-ae03-affaa7a80cfc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T04:17:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f5b95362-c5e7-47ac-ae03-affaa7a80cfc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T04:17:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"61d7e1da-acd2-48a5-8df1-8b7f409c56b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33058","PortSpecifier":{"PortValue":33058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"61d7e1da-acd2-48a5-8df1-8b7f409c56b6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-38610b.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T04:17:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"61d7e1da-acd2-48a5-8df1-8b7f409c56b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33058","PortSpecifier":{"PortValue":33058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784693877,"nanos":450907077},"http":{"id":"61d7e1da-acd2-48a5-8df1-8b7f409c56b6","method":"POST","headers":{":authority":"e2e-shared-b-38610b.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:17:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"61d7e1da-acd2-48a5-8df1-8b7f409c56b6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T04:17:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"61d7e1da-acd2-48a5-8df1-8b7f409c56b6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"88d523f6-2b3e-4966-9ce1-debf8be3a1cf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=eaea3edd-9c76-456b-b6f4-85607b8e9c74"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e824959af2ef"]}}
{"level":"debug","ts":"2026-07-22T04:17:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"61d7e1da-acd2-48a5-8df1-8b7f409c56b6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e824959af2ef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eaea3edd-9c76-456b-b6f4-85607b8e9c74"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"88d523f6-2b3e-4966-9ce1-debf8be3a1cf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-38610b.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:17:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61d7e1da-acd2-48a5-8df1-8b7f409c56b6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:17:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61d7e1da-acd2-48a5-8df1-8b7f409c56b6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:17:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61d7e1da-acd2-48a5-8df1-8b7f409c56b6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-38610b/rate-test-model-38610b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-38610b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:17:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"61d7e1da-acd2-48a5-8df1-8b7f409c56b6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T04:17:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61d7e1da-acd2-48a5-8df1-8b7f409c56b6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T04:17:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61d7e1da-acd2-48a5-8df1-8b7f409c56b6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T04:17:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"61d7e1da-acd2-48a5-8df1-8b7f409c56b6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T04:17:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"61d7e1da-acd2-48a5-8df1-8b7f409c56b6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T04:17:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e643f3a8-2fc6-4182-989c-447cd3102154","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41000","PortSpecifier":{"PortValue":41000}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e643f3a8-2fc6-4182-989c-447cd3102154","method":"POST","path":"/ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671/v1/completions","host":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T04:17:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e643f3a8-2fc6-4182-989c-447cd3102154","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41000","PortSpecifier":{"PortValue":41000}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784693877,"nanos":489468875},"http":{"id":"e643f3a8-2fc6-4182-989c-447cd3102154","method":"POST","headers":{":authority":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:17:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e643f3a8-2fc6-4182-989c-447cd3102154","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-EcKXxjlwiCsxMvgf_jt6QhX2WLc8QNhYCjD3RsOAHPrlTjV2EvFjKbhDWvG6"}
{"level":"debug","ts":"2026-07-22T04:17:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e643f3a8-2fc6-4182-989c-447cd3102154","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-EcKXxjlwiCsxMvgf_jt6QhX2WLc8QNhYCjD3RsOAHPrlTjV2EvFjKbhDWvG6\"}"}
{"level":"debug","ts":"2026-07-22T04:17:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e643f3a8-2fc6-4182-989c-447cd3102154","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fb60f6bf-bd2b-45c5-9485-e5a592729577","keyName":"e2e-rate-a-1134f5","subscription":"e2e-rate-iso-a-1134f5","tenant":"e2e-shared-a-dd1671","userId":"fb60f6bf-bd2b-45c5-9485-e5a592729577","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T04:17:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e643f3a8-2fc6-4182-989c-447cd3102154","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671\",\"requestedSubscription\":\"e2e-rate-iso-a-1134f5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T04:17:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e643f3a8-2fc6-4182-989c-447cd3102154","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-dd1671","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1134f5","namespace":"ai-tenant-e2e-shared-a-dd1671","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671"}}
{"level":"debug","ts":"2026-07-22T04:17:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e643f3a8-2fc6-4182-989c-447cd3102154","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:17:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e643f3a8-2fc6-4182-989c-447cd3102154","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:17:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e643f3a8-2fc6-4182-989c-447cd3102154","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:17:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e643f3a8-2fc6-4182-989c-447cd3102154","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:17:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e643f3a8-2fc6-4182-989c-447cd3102154","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-dd1671/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:17:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e643f3a8-2fc6-4182-989c-447cd3102154","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T04:17:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e643f3a8-2fc6-4182-989c-447cd3102154","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1134f5"}
{"level":"debug","ts":"2026-07-22T04:17:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e643f3a8-2fc6-4182-989c-447cd3102154","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T04:17:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e643f3a8-2fc6-4182-989c-447cd3102154","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fb60f6bf-bd2b-45c5-9485-e5a592729577","keyName":"e2e-rate-a-1134f5","selected_subscription":"e2e-rate-iso-a-1134f5","selected_subscription_key":"ai-tenant-e2e-shared-a-dd1671/e2e-rate-iso-a-1134f5@ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-dd1671","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1134f5","namespace":"ai-tenant-e2e-shared-a-dd1671","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T04:17:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e643f3a8-2fc6-4182-989c-447cd3102154","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T04:17:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e643f3a8-2fc6-4182-989c-447cd3102154","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T04:17:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"041f70de-f6f1-4953-8104-4a499c1cab89","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41010","PortSpecifier":{"PortValue":41010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"041f70de-f6f1-4953-8104-4a499c1cab89","method":"POST","path":"/ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671/v1/completions","host":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T04:17:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"041f70de-f6f1-4953-8104-4a499c1cab89","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41010","PortSpecifier":{"PortValue":41010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784693878,"nanos":524966881},"http":{"id":"041f70de-f6f1-4953-8104-4a499c1cab89","method":"POST","headers":{":authority":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:17:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"041f70de-f6f1-4953-8104-4a499c1cab89","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-EcKXxjlwiCsxMvgf_jt6QhX2WLc8QNhYCjD3RsOAHPrlTjV2EvFjKbhDWvG6"}
{"level":"debug","ts":"2026-07-22T04:17:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"041f70de-f6f1-4953-8104-4a499c1cab89","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-EcKXxjlwiCsxMvgf_jt6QhX2WLc8QNhYCjD3RsOAHPrlTjV2EvFjKbhDWvG6\"}"}
{"level":"debug","ts":"2026-07-22T04:17:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"041f70de-f6f1-4953-8104-4a499c1cab89","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fb60f6bf-bd2b-45c5-9485-e5a592729577","keyName":"e2e-rate-a-1134f5","subscription":"e2e-rate-iso-a-1134f5","tenant":"e2e-shared-a-dd1671","userId":"fb60f6bf-bd2b-45c5-9485-e5a592729577","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T04:17:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"041f70de-f6f1-4953-8104-4a499c1cab89","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671\",\"requestedSubscription\":\"e2e-rate-iso-a-1134f5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T04:17:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"041f70de-f6f1-4953-8104-4a499c1cab89","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-dd1671","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1134f5","namespace":"ai-tenant-e2e-shared-a-dd1671","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671"}}
{"level":"debug","ts":"2026-07-22T04:17:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"041f70de-f6f1-4953-8104-4a499c1cab89","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:17:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"041f70de-f6f1-4953-8104-4a499c1cab89","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:17:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"041f70de-f6f1-4953-8104-4a499c1cab89","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:17:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"041f70de-f6f1-4953-8104-4a499c1cab89","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-dd1671/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:17:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"041f70de-f6f1-4953-8104-4a499c1cab89","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:17:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"041f70de-f6f1-4953-8104-4a499c1cab89","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T04:17:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"041f70de-f6f1-4953-8104-4a499c1cab89","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1134f5"}
{"level":"debug","ts":"2026-07-22T04:17:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"041f70de-f6f1-4953-8104-4a499c1cab89","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T04:17:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"041f70de-f6f1-4953-8104-4a499c1cab89","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fb60f6bf-bd2b-45c5-9485-e5a592729577","keyName":"e2e-rate-a-1134f5","selected_subscription":"e2e-rate-iso-a-1134f5","selected_subscription_key":"ai-tenant-e2e-shared-a-dd1671/e2e-rate-iso-a-1134f5@ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-dd1671","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1134f5","namespace":"ai-tenant-e2e-shared-a-dd1671","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T04:17:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"041f70de-f6f1-4953-8104-4a499c1cab89","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T04:17:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"041f70de-f6f1-4953-8104-4a499c1cab89","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T04:17:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"41dac6de-9441-456f-8f31-475f689596b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41020","PortSpecifier":{"PortValue":41020}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"41dac6de-9441-456f-8f31-475f689596b4","method":"POST","path":"/ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671/v1/completions","host":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T04:17:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"41dac6de-9441-456f-8f31-475f689596b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41020","PortSpecifier":{"PortValue":41020}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784693879,"nanos":564521406},"http":{"id":"41dac6de-9441-456f-8f31-475f689596b4","method":"POST","headers":{":authority":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:17:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"41dac6de-9441-456f-8f31-475f689596b4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-EcKXxjlwiCsxMvgf_jt6QhX2WLc8QNhYCjD3RsOAHPrlTjV2EvFjKbhDWvG6"}
{"level":"debug","ts":"2026-07-22T04:17:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"41dac6de-9441-456f-8f31-475f689596b4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-EcKXxjlwiCsxMvgf_jt6QhX2WLc8QNhYCjD3RsOAHPrlTjV2EvFjKbhDWvG6\"}"}
{"level":"debug","ts":"2026-07-22T04:17:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"41dac6de-9441-456f-8f31-475f689596b4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fb60f6bf-bd2b-45c5-9485-e5a592729577","keyName":"e2e-rate-a-1134f5","subscription":"e2e-rate-iso-a-1134f5","tenant":"e2e-shared-a-dd1671","userId":"fb60f6bf-bd2b-45c5-9485-e5a592729577","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T04:17:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"41dac6de-9441-456f-8f31-475f689596b4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671\",\"requestedSubscription\":\"e2e-rate-iso-a-1134f5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T04:17:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"41dac6de-9441-456f-8f31-475f689596b4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-dd1671","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1134f5","namespace":"ai-tenant-e2e-shared-a-dd1671","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671"}}
{"level":"debug","ts":"2026-07-22T04:17:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"41dac6de-9441-456f-8f31-475f689596b4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:17:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41dac6de-9441-456f-8f31-475f689596b4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:17:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41dac6de-9441-456f-8f31-475f689596b4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:17:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41dac6de-9441-456f-8f31-475f689596b4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:17:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41dac6de-9441-456f-8f31-475f689596b4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-dd1671/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:17:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41dac6de-9441-456f-8f31-475f689596b4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T04:17:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41dac6de-9441-456f-8f31-475f689596b4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T04:17:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41dac6de-9441-456f-8f31-475f689596b4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1134f5"}
{"level":"debug","ts":"2026-07-22T04:17:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41dac6de-9441-456f-8f31-475f689596b4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fb60f6bf-bd2b-45c5-9485-e5a592729577","keyName":"e2e-rate-a-1134f5","selected_subscription":"e2e-rate-iso-a-1134f5","selected_subscription_key":"ai-tenant-e2e-shared-a-dd1671/e2e-rate-iso-a-1134f5@ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-dd1671","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1134f5","namespace":"ai-tenant-e2e-shared-a-dd1671","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T04:17:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"41dac6de-9441-456f-8f31-475f689596b4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T04:17:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"41dac6de-9441-456f-8f31-475f689596b4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T04:18:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"117f6aca-9e95-45cc-a881-522098fcef96","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41026","PortSpecifier":{"PortValue":41026}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"117f6aca-9e95-45cc-a881-522098fcef96","method":"POST","path":"/ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671/v1/completions","host":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T04:18:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"117f6aca-9e95-45cc-a881-522098fcef96","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41026","PortSpecifier":{"PortValue":41026}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784693880,"nanos":601135804},"http":{"id":"117f6aca-9e95-45cc-a881-522098fcef96","method":"POST","headers":{":authority":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:18:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"117f6aca-9e95-45cc-a881-522098fcef96","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-EcKXxjlwiCsxMvgf_jt6QhX2WLc8QNhYCjD3RsOAHPrlTjV2EvFjKbhDWvG6"}
{"level":"debug","ts":"2026-07-22T04:18:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"117f6aca-9e95-45cc-a881-522098fcef96","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-EcKXxjlwiCsxMvgf_jt6QhX2WLc8QNhYCjD3RsOAHPrlTjV2EvFjKbhDWvG6\"}"}
{"level":"debug","ts":"2026-07-22T04:18:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"117f6aca-9e95-45cc-a881-522098fcef96","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fb60f6bf-bd2b-45c5-9485-e5a592729577","keyName":"e2e-rate-a-1134f5","subscription":"e2e-rate-iso-a-1134f5","tenant":"e2e-shared-a-dd1671","userId":"fb60f6bf-bd2b-45c5-9485-e5a592729577","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T04:18:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"117f6aca-9e95-45cc-a881-522098fcef96","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671\",\"requestedSubscription\":\"e2e-rate-iso-a-1134f5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T04:18:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"117f6aca-9e95-45cc-a881-522098fcef96","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-dd1671","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1134f5","namespace":"ai-tenant-e2e-shared-a-dd1671","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671"}}
{"level":"debug","ts":"2026-07-22T04:18:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"117f6aca-9e95-45cc-a881-522098fcef96","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:18:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"117f6aca-9e95-45cc-a881-522098fcef96","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:18:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"117f6aca-9e95-45cc-a881-522098fcef96","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:18:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"117f6aca-9e95-45cc-a881-522098fcef96","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-dd1671/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:18:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"117f6aca-9e95-45cc-a881-522098fcef96","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:18:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"117f6aca-9e95-45cc-a881-522098fcef96","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T04:18:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"117f6aca-9e95-45cc-a881-522098fcef96","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T04:18:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"117f6aca-9e95-45cc-a881-522098fcef96","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1134f5"}
{"level":"debug","ts":"2026-07-22T04:18:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"117f6aca-9e95-45cc-a881-522098fcef96","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fb60f6bf-bd2b-45c5-9485-e5a592729577","keyName":"e2e-rate-a-1134f5","selected_subscription":"e2e-rate-iso-a-1134f5","selected_subscription_key":"ai-tenant-e2e-shared-a-dd1671/e2e-rate-iso-a-1134f5@ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-dd1671","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1134f5","namespace":"ai-tenant-e2e-shared-a-dd1671","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T04:18:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"117f6aca-9e95-45cc-a881-522098fcef96","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T04:18:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"117f6aca-9e95-45cc-a881-522098fcef96","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T04:18:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d921160-73d3-4479-8401-63c00766328e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41034","PortSpecifier":{"PortValue":41034}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3d921160-73d3-4479-8401-63c00766328e","method":"POST","path":"/ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671/v1/completions","host":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T04:18:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d921160-73d3-4479-8401-63c00766328e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41034","PortSpecifier":{"PortValue":41034}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784693881,"nanos":654521950},"http":{"id":"3d921160-73d3-4479-8401-63c00766328e","method":"POST","headers":{":authority":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:18:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3d921160-73d3-4479-8401-63c00766328e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-EcKXxjlwiCsxMvgf_jt6QhX2WLc8QNhYCjD3RsOAHPrlTjV2EvFjKbhDWvG6"}
{"level":"debug","ts":"2026-07-22T04:18:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3d921160-73d3-4479-8401-63c00766328e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-EcKXxjlwiCsxMvgf_jt6QhX2WLc8QNhYCjD3RsOAHPrlTjV2EvFjKbhDWvG6\"}"}
{"level":"debug","ts":"2026-07-22T04:18:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3d921160-73d3-4479-8401-63c00766328e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fb60f6bf-bd2b-45c5-9485-e5a592729577","keyName":"e2e-rate-a-1134f5","subscription":"e2e-rate-iso-a-1134f5","tenant":"e2e-shared-a-dd1671","userId":"fb60f6bf-bd2b-45c5-9485-e5a592729577","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T04:18:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3d921160-73d3-4479-8401-63c00766328e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671\",\"requestedSubscription\":\"e2e-rate-iso-a-1134f5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T04:18:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3d921160-73d3-4479-8401-63c00766328e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-dd1671","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1134f5","namespace":"ai-tenant-e2e-shared-a-dd1671","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671"}}
{"level":"debug","ts":"2026-07-22T04:18:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3d921160-73d3-4479-8401-63c00766328e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:18:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d921160-73d3-4479-8401-63c00766328e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:18:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d921160-73d3-4479-8401-63c00766328e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:18:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d921160-73d3-4479-8401-63c00766328e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:18:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d921160-73d3-4479-8401-63c00766328e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-dd1671/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:18:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d921160-73d3-4479-8401-63c00766328e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T04:18:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d921160-73d3-4479-8401-63c00766328e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T04:18:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d921160-73d3-4479-8401-63c00766328e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1134f5"}
{"level":"debug","ts":"2026-07-22T04:18:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d921160-73d3-4479-8401-63c00766328e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fb60f6bf-bd2b-45c5-9485-e5a592729577","keyName":"e2e-rate-a-1134f5","selected_subscription":"e2e-rate-iso-a-1134f5","selected_subscription_key":"ai-tenant-e2e-shared-a-dd1671/e2e-rate-iso-a-1134f5@ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-dd1671","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1134f5","namespace":"ai-tenant-e2e-shared-a-dd1671","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T04:18:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d921160-73d3-4479-8401-63c00766328e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T04:18:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d921160-73d3-4479-8401-63c00766328e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T04:18:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2459541a-5062-4ba9-b9d5-194710bc6614","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41050","PortSpecifier":{"PortValue":41050}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2459541a-5062-4ba9-b9d5-194710bc6614","method":"POST","path":"/ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671/v1/completions","host":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T04:18:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2459541a-5062-4ba9-b9d5-194710bc6614","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41050","PortSpecifier":{"PortValue":41050}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784693882,"nanos":694834488},"http":{"id":"2459541a-5062-4ba9-b9d5-194710bc6614","method":"POST","headers":{":authority":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:18:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2459541a-5062-4ba9-b9d5-194710bc6614","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-EcKXxjlwiCsxMvgf_jt6QhX2WLc8QNhYCjD3RsOAHPrlTjV2EvFjKbhDWvG6"}
{"level":"debug","ts":"2026-07-22T04:18:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2459541a-5062-4ba9-b9d5-194710bc6614","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-EcKXxjlwiCsxMvgf_jt6QhX2WLc8QNhYCjD3RsOAHPrlTjV2EvFjKbhDWvG6\"}"}
{"level":"debug","ts":"2026-07-22T04:18:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2459541a-5062-4ba9-b9d5-194710bc6614","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fb60f6bf-bd2b-45c5-9485-e5a592729577","keyName":"e2e-rate-a-1134f5","subscription":"e2e-rate-iso-a-1134f5","tenant":"e2e-shared-a-dd1671","userId":"fb60f6bf-bd2b-45c5-9485-e5a592729577","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T04:18:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2459541a-5062-4ba9-b9d5-194710bc6614","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671\",\"requestedSubscription\":\"e2e-rate-iso-a-1134f5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T04:18:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2459541a-5062-4ba9-b9d5-194710bc6614","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-dd1671","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1134f5","namespace":"ai-tenant-e2e-shared-a-dd1671","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671"}}
{"level":"debug","ts":"2026-07-22T04:18:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2459541a-5062-4ba9-b9d5-194710bc6614","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:18:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2459541a-5062-4ba9-b9d5-194710bc6614","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:18:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2459541a-5062-4ba9-b9d5-194710bc6614","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:18:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2459541a-5062-4ba9-b9d5-194710bc6614","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-dd1671/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:18:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2459541a-5062-4ba9-b9d5-194710bc6614","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:18:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2459541a-5062-4ba9-b9d5-194710bc6614","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T04:18:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2459541a-5062-4ba9-b9d5-194710bc6614","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T04:18:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2459541a-5062-4ba9-b9d5-194710bc6614","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1134f5"}
{"level":"debug","ts":"2026-07-22T04:18:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2459541a-5062-4ba9-b9d5-194710bc6614","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fb60f6bf-bd2b-45c5-9485-e5a592729577","keyName":"e2e-rate-a-1134f5","selected_subscription":"e2e-rate-iso-a-1134f5","selected_subscription_key":"ai-tenant-e2e-shared-a-dd1671/e2e-rate-iso-a-1134f5@ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-dd1671","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1134f5","namespace":"ai-tenant-e2e-shared-a-dd1671","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T04:18:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2459541a-5062-4ba9-b9d5-194710bc6614","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T04:18:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2459541a-5062-4ba9-b9d5-194710bc6614","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T04:18:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77c52b23-777e-4320-849d-b4b38b35df38","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41062","PortSpecifier":{"PortValue":41062}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"77c52b23-777e-4320-849d-b4b38b35df38","method":"POST","path":"/ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671/v1/completions","host":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T04:18:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77c52b23-777e-4320-849d-b4b38b35df38","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41062","PortSpecifier":{"PortValue":41062}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784693883,"nanos":743976728},"http":{"id":"77c52b23-777e-4320-849d-b4b38b35df38","method":"POST","headers":{":authority":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:18:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"77c52b23-777e-4320-849d-b4b38b35df38","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-EcKXxjlwiCsxMvgf_jt6QhX2WLc8QNhYCjD3RsOAHPrlTjV2EvFjKbhDWvG6"}
{"level":"debug","ts":"2026-07-22T04:18:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"77c52b23-777e-4320-849d-b4b38b35df38","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-EcKXxjlwiCsxMvgf_jt6QhX2WLc8QNhYCjD3RsOAHPrlTjV2EvFjKbhDWvG6\"}"}
{"level":"debug","ts":"2026-07-22T04:18:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"77c52b23-777e-4320-849d-b4b38b35df38","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fb60f6bf-bd2b-45c5-9485-e5a592729577","keyName":"e2e-rate-a-1134f5","subscription":"e2e-rate-iso-a-1134f5","tenant":"e2e-shared-a-dd1671","userId":"fb60f6bf-bd2b-45c5-9485-e5a592729577","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T04:18:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"77c52b23-777e-4320-849d-b4b38b35df38","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671\",\"requestedSubscription\":\"e2e-rate-iso-a-1134f5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T04:18:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"77c52b23-777e-4320-849d-b4b38b35df38","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-dd1671","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1134f5","namespace":"ai-tenant-e2e-shared-a-dd1671","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671"}}
{"level":"debug","ts":"2026-07-22T04:18:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"77c52b23-777e-4320-849d-b4b38b35df38","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:18:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77c52b23-777e-4320-849d-b4b38b35df38","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:18:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77c52b23-777e-4320-849d-b4b38b35df38","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:18:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77c52b23-777e-4320-849d-b4b38b35df38","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-dd1671/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:18:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77c52b23-777e-4320-849d-b4b38b35df38","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:18:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77c52b23-777e-4320-849d-b4b38b35df38","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T04:18:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77c52b23-777e-4320-849d-b4b38b35df38","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1134f5"}
{"level":"debug","ts":"2026-07-22T04:18:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77c52b23-777e-4320-849d-b4b38b35df38","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T04:18:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77c52b23-777e-4320-849d-b4b38b35df38","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fb60f6bf-bd2b-45c5-9485-e5a592729577","keyName":"e2e-rate-a-1134f5","selected_subscription":"e2e-rate-iso-a-1134f5","selected_subscription_key":"ai-tenant-e2e-shared-a-dd1671/e2e-rate-iso-a-1134f5@ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-dd1671","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1134f5","namespace":"ai-tenant-e2e-shared-a-dd1671","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T04:18:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77c52b23-777e-4320-849d-b4b38b35df38","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T04:18:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77c52b23-777e-4320-849d-b4b38b35df38","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T04:18:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ea24f1c-f1b1-4b66-95b0-ed3dcc3c208a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41070","PortSpecifier":{"PortValue":41070}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5ea24f1c-f1b1-4b66-95b0-ed3dcc3c208a","method":"POST","path":"/ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671/v1/completions","host":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T04:18:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ea24f1c-f1b1-4b66-95b0-ed3dcc3c208a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41070","PortSpecifier":{"PortValue":41070}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784693884,"nanos":778486943},"http":{"id":"5ea24f1c-f1b1-4b66-95b0-ed3dcc3c208a","method":"POST","headers":{":authority":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:18:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5ea24f1c-f1b1-4b66-95b0-ed3dcc3c208a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-EcKXxjlwiCsxMvgf_jt6QhX2WLc8QNhYCjD3RsOAHPrlTjV2EvFjKbhDWvG6"}
{"level":"debug","ts":"2026-07-22T04:18:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5ea24f1c-f1b1-4b66-95b0-ed3dcc3c208a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-EcKXxjlwiCsxMvgf_jt6QhX2WLc8QNhYCjD3RsOAHPrlTjV2EvFjKbhDWvG6\"}"}
{"level":"debug","ts":"2026-07-22T04:18:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5ea24f1c-f1b1-4b66-95b0-ed3dcc3c208a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fb60f6bf-bd2b-45c5-9485-e5a592729577","keyName":"e2e-rate-a-1134f5","subscription":"e2e-rate-iso-a-1134f5","tenant":"e2e-shared-a-dd1671","userId":"fb60f6bf-bd2b-45c5-9485-e5a592729577","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T04:18:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5ea24f1c-f1b1-4b66-95b0-ed3dcc3c208a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671\",\"requestedSubscription\":\"e2e-rate-iso-a-1134f5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T04:18:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5ea24f1c-f1b1-4b66-95b0-ed3dcc3c208a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-dd1671","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1134f5","namespace":"ai-tenant-e2e-shared-a-dd1671","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671"}}
{"level":"debug","ts":"2026-07-22T04:18:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5ea24f1c-f1b1-4b66-95b0-ed3dcc3c208a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:18:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ea24f1c-f1b1-4b66-95b0-ed3dcc3c208a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:18:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ea24f1c-f1b1-4b66-95b0-ed3dcc3c208a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:18:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ea24f1c-f1b1-4b66-95b0-ed3dcc3c208a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-dd1671/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:18:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ea24f1c-f1b1-4b66-95b0-ed3dcc3c208a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:18:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ea24f1c-f1b1-4b66-95b0-ed3dcc3c208a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T04:18:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ea24f1c-f1b1-4b66-95b0-ed3dcc3c208a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1134f5"}
{"level":"debug","ts":"2026-07-22T04:18:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ea24f1c-f1b1-4b66-95b0-ed3dcc3c208a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T04:18:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ea24f1c-f1b1-4b66-95b0-ed3dcc3c208a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fb60f6bf-bd2b-45c5-9485-e5a592729577","keyName":"e2e-rate-a-1134f5","selected_subscription":"e2e-rate-iso-a-1134f5","selected_subscription_key":"ai-tenant-e2e-shared-a-dd1671/e2e-rate-iso-a-1134f5@ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-dd1671","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1134f5","namespace":"ai-tenant-e2e-shared-a-dd1671","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T04:18:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ea24f1c-f1b1-4b66-95b0-ed3dcc3c208a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T04:18:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ea24f1c-f1b1-4b66-95b0-ed3dcc3c208a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T04:18:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f218245-57c4-4939-80ba-69d03beed7cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41076","PortSpecifier":{"PortValue":41076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3f218245-57c4-4939-80ba-69d03beed7cc","method":"POST","path":"/ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671/v1/completions","host":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T04:18:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f218245-57c4-4939-80ba-69d03beed7cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41076","PortSpecifier":{"PortValue":41076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784693885,"nanos":813992863},"http":{"id":"3f218245-57c4-4939-80ba-69d03beed7cc","method":"POST","headers":{":authority":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:18:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3f218245-57c4-4939-80ba-69d03beed7cc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-EcKXxjlwiCsxMvgf_jt6QhX2WLc8QNhYCjD3RsOAHPrlTjV2EvFjKbhDWvG6"}
{"level":"debug","ts":"2026-07-22T04:18:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3f218245-57c4-4939-80ba-69d03beed7cc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-EcKXxjlwiCsxMvgf_jt6QhX2WLc8QNhYCjD3RsOAHPrlTjV2EvFjKbhDWvG6\"}"}
{"level":"debug","ts":"2026-07-22T04:18:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3f218245-57c4-4939-80ba-69d03beed7cc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fb60f6bf-bd2b-45c5-9485-e5a592729577","keyName":"e2e-rate-a-1134f5","subscription":"e2e-rate-iso-a-1134f5","tenant":"e2e-shared-a-dd1671","userId":"fb60f6bf-bd2b-45c5-9485-e5a592729577","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T04:18:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3f218245-57c4-4939-80ba-69d03beed7cc","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671\",\"requestedSubscription\":\"e2e-rate-iso-a-1134f5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T04:18:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3f218245-57c4-4939-80ba-69d03beed7cc","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-dd1671","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1134f5","namespace":"ai-tenant-e2e-shared-a-dd1671","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671"}}
{"level":"debug","ts":"2026-07-22T04:18:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3f218245-57c4-4939-80ba-69d03beed7cc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:18:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f218245-57c4-4939-80ba-69d03beed7cc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:18:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f218245-57c4-4939-80ba-69d03beed7cc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:18:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f218245-57c4-4939-80ba-69d03beed7cc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-dd1671/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:18:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f218245-57c4-4939-80ba-69d03beed7cc","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:18:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f218245-57c4-4939-80ba-69d03beed7cc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T04:18:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f218245-57c4-4939-80ba-69d03beed7cc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1134f5"}
{"level":"debug","ts":"2026-07-22T04:18:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f218245-57c4-4939-80ba-69d03beed7cc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T04:18:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f218245-57c4-4939-80ba-69d03beed7cc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fb60f6bf-bd2b-45c5-9485-e5a592729577","keyName":"e2e-rate-a-1134f5","selected_subscription":"e2e-rate-iso-a-1134f5","selected_subscription_key":"ai-tenant-e2e-shared-a-dd1671/e2e-rate-iso-a-1134f5@ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-dd1671","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1134f5","namespace":"ai-tenant-e2e-shared-a-dd1671","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T04:18:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f218245-57c4-4939-80ba-69d03beed7cc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T04:18:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f218245-57c4-4939-80ba-69d03beed7cc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T04:18:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ea77231-7472-44ec-b7a8-94e5afa9775d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41084","PortSpecifier":{"PortValue":41084}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5ea77231-7472-44ec-b7a8-94e5afa9775d","method":"POST","path":"/ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671/v1/completions","host":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T04:18:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ea77231-7472-44ec-b7a8-94e5afa9775d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41084","PortSpecifier":{"PortValue":41084}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784693886,"nanos":847954910},"http":{"id":"5ea77231-7472-44ec-b7a8-94e5afa9775d","method":"POST","headers":{":authority":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:18:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5ea77231-7472-44ec-b7a8-94e5afa9775d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-EcKXxjlwiCsxMvgf_jt6QhX2WLc8QNhYCjD3RsOAHPrlTjV2EvFjKbhDWvG6"}
{"level":"debug","ts":"2026-07-22T04:18:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5ea77231-7472-44ec-b7a8-94e5afa9775d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-EcKXxjlwiCsxMvgf_jt6QhX2WLc8QNhYCjD3RsOAHPrlTjV2EvFjKbhDWvG6\"}"}
{"level":"debug","ts":"2026-07-22T04:18:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5ea77231-7472-44ec-b7a8-94e5afa9775d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fb60f6bf-bd2b-45c5-9485-e5a592729577","keyName":"e2e-rate-a-1134f5","subscription":"e2e-rate-iso-a-1134f5","tenant":"e2e-shared-a-dd1671","userId":"fb60f6bf-bd2b-45c5-9485-e5a592729577","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T04:18:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5ea77231-7472-44ec-b7a8-94e5afa9775d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671\",\"requestedSubscription\":\"e2e-rate-iso-a-1134f5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T04:18:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5ea77231-7472-44ec-b7a8-94e5afa9775d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-dd1671","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1134f5","namespace":"ai-tenant-e2e-shared-a-dd1671","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671"}}
{"level":"debug","ts":"2026-07-22T04:18:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5ea77231-7472-44ec-b7a8-94e5afa9775d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:18:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ea77231-7472-44ec-b7a8-94e5afa9775d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:18:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ea77231-7472-44ec-b7a8-94e5afa9775d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:18:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ea77231-7472-44ec-b7a8-94e5afa9775d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-dd1671/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:18:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ea77231-7472-44ec-b7a8-94e5afa9775d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:18:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ea77231-7472-44ec-b7a8-94e5afa9775d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T04:18:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ea77231-7472-44ec-b7a8-94e5afa9775d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T04:18:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ea77231-7472-44ec-b7a8-94e5afa9775d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1134f5"}
{"level":"debug","ts":"2026-07-22T04:18:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ea77231-7472-44ec-b7a8-94e5afa9775d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fb60f6bf-bd2b-45c5-9485-e5a592729577","keyName":"e2e-rate-a-1134f5","selected_subscription":"e2e-rate-iso-a-1134f5","selected_subscription_key":"ai-tenant-e2e-shared-a-dd1671/e2e-rate-iso-a-1134f5@ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-dd1671","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1134f5","namespace":"ai-tenant-e2e-shared-a-dd1671","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T04:18:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ea77231-7472-44ec-b7a8-94e5afa9775d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T04:18:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ea77231-7472-44ec-b7a8-94e5afa9775d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T04:18:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31690f4f-cadc-4bd8-bee1-d298899eca0e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41086","PortSpecifier":{"PortValue":41086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"31690f4f-cadc-4bd8-bee1-d298899eca0e","method":"POST","path":"/ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671/v1/completions","host":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T04:18:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31690f4f-cadc-4bd8-bee1-d298899eca0e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41086","PortSpecifier":{"PortValue":41086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784693887,"nanos":886405340},"http":{"id":"31690f4f-cadc-4bd8-bee1-d298899eca0e","method":"POST","headers":{":authority":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:18:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"31690f4f-cadc-4bd8-bee1-d298899eca0e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-EcKXxjlwiCsxMvgf_jt6QhX2WLc8QNhYCjD3RsOAHPrlTjV2EvFjKbhDWvG6"}
{"level":"debug","ts":"2026-07-22T04:18:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"31690f4f-cadc-4bd8-bee1-d298899eca0e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-EcKXxjlwiCsxMvgf_jt6QhX2WLc8QNhYCjD3RsOAHPrlTjV2EvFjKbhDWvG6\"}"}
{"level":"debug","ts":"2026-07-22T04:18:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"31690f4f-cadc-4bd8-bee1-d298899eca0e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fb60f6bf-bd2b-45c5-9485-e5a592729577","keyName":"e2e-rate-a-1134f5","subscription":"e2e-rate-iso-a-1134f5","tenant":"e2e-shared-a-dd1671","userId":"fb60f6bf-bd2b-45c5-9485-e5a592729577","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T04:18:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"31690f4f-cadc-4bd8-bee1-d298899eca0e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671\",\"requestedSubscription\":\"e2e-rate-iso-a-1134f5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T04:18:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"31690f4f-cadc-4bd8-bee1-d298899eca0e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-dd1671","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1134f5","namespace":"ai-tenant-e2e-shared-a-dd1671","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671"}}
{"level":"debug","ts":"2026-07-22T04:18:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"31690f4f-cadc-4bd8-bee1-d298899eca0e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:18:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31690f4f-cadc-4bd8-bee1-d298899eca0e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:18:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31690f4f-cadc-4bd8-bee1-d298899eca0e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:18:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31690f4f-cadc-4bd8-bee1-d298899eca0e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-dd1671/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:18:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31690f4f-cadc-4bd8-bee1-d298899eca0e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:18:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31690f4f-cadc-4bd8-bee1-d298899eca0e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T04:18:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31690f4f-cadc-4bd8-bee1-d298899eca0e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T04:18:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31690f4f-cadc-4bd8-bee1-d298899eca0e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1134f5"}
{"level":"debug","ts":"2026-07-22T04:18:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31690f4f-cadc-4bd8-bee1-d298899eca0e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fb60f6bf-bd2b-45c5-9485-e5a592729577","keyName":"e2e-rate-a-1134f5","selected_subscription":"e2e-rate-iso-a-1134f5","selected_subscription_key":"ai-tenant-e2e-shared-a-dd1671/e2e-rate-iso-a-1134f5@ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-dd1671","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1134f5","namespace":"ai-tenant-e2e-shared-a-dd1671","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T04:18:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31690f4f-cadc-4bd8-bee1-d298899eca0e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T04:18:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31690f4f-cadc-4bd8-bee1-d298899eca0e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T04:18:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"76a6746c-1d77-488d-ae5a-130daf652eb2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41098","PortSpecifier":{"PortValue":41098}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"76a6746c-1d77-488d-ae5a-130daf652eb2","method":"POST","path":"/ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671/v1/completions","host":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T04:18:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"76a6746c-1d77-488d-ae5a-130daf652eb2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41098","PortSpecifier":{"PortValue":41098}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784693888,"nanos":946009146},"http":{"id":"76a6746c-1d77-488d-ae5a-130daf652eb2","method":"POST","headers":{":authority":"e2e-shared-a-dd1671.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:18:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"76a6746c-1d77-488d-ae5a-130daf652eb2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-EcKXxjlwiCsxMvgf_jt6QhX2WLc8QNhYCjD3RsOAHPrlTjV2EvFjKbhDWvG6"}
{"level":"debug","ts":"2026-07-22T04:18:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"76a6746c-1d77-488d-ae5a-130daf652eb2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-EcKXxjlwiCsxMvgf_jt6QhX2WLc8QNhYCjD3RsOAHPrlTjV2EvFjKbhDWvG6\"}"}
{"level":"debug","ts":"2026-07-22T04:18:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"76a6746c-1d77-488d-ae5a-130daf652eb2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fb60f6bf-bd2b-45c5-9485-e5a592729577","keyName":"e2e-rate-a-1134f5","subscription":"e2e-rate-iso-a-1134f5","tenant":"e2e-shared-a-dd1671","userId":"fb60f6bf-bd2b-45c5-9485-e5a592729577","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T04:18:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"76a6746c-1d77-488d-ae5a-130daf652eb2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671\",\"requestedSubscription\":\"e2e-rate-iso-a-1134f5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T04:18:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"76a6746c-1d77-488d-ae5a-130daf652eb2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-dd1671.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-dd1671","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1134f5","namespace":"ai-tenant-e2e-shared-a-dd1671","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671"}}
{"level":"debug","ts":"2026-07-22T04:18:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"76a6746c-1d77-488d-ae5a-130daf652eb2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:18:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76a6746c-1d77-488d-ae5a-130daf652eb2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:18:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76a6746c-1d77-488d-ae5a-130daf652eb2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:18:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76a6746c-1d77-488d-ae5a-130daf652eb2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:18:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76a6746c-1d77-488d-ae5a-130daf652eb2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-dd1671/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:18:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76a6746c-1d77-488d-ae5a-130daf652eb2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T04:18:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76a6746c-1d77-488d-ae5a-130daf652eb2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1134f5"}
{"level":"debug","ts":"2026-07-22T04:18:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76a6746c-1d77-488d-ae5a-130daf652eb2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T04:18:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76a6746c-1d77-488d-ae5a-130daf652eb2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fb60f6bf-bd2b-45c5-9485-e5a592729577","keyName":"e2e-rate-a-1134f5","selected_subscription":"e2e-rate-iso-a-1134f5","selected_subscription_key":"ai-tenant-e2e-shared-a-dd1671/e2e-rate-iso-a-1134f5@ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-dd1671","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1134f5","namespace":"ai-tenant-e2e-shared-a-dd1671","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-dd1671/rate-test-model-dd1671"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T04:18:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"76a6746c-1d77-488d-ae5a-130daf652eb2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T04:18:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"76a6746c-1d77-488d-ae5a-130daf652eb2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T04:18:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27dfcb12-3775-4e01-a8ba-6cf3773853b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39720","PortSpecifier":{"PortValue":39720}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"27dfcb12-3775-4e01-a8ba-6cf3773853b3","method":"POST","path":"/ai-tenant-e2e-shared-b-38610b/rate-test-model-38610b/v1/completions","host":"e2e-shared-b-38610b.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T04:18:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27dfcb12-3775-4e01-a8ba-6cf3773853b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39720","PortSpecifier":{"PortValue":39720}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784693888,"nanos":978033718},"http":{"id":"27dfcb12-3775-4e01-a8ba-6cf3773853b3","method":"POST","headers":{":authority":"e2e-shared-b-38610b.apps.a4e64f71-0acc-4a4a-8127-e824959af2ef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-38610b/rate-test-model-38610b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:18:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"27dfcb12-3775-4e01-a8ba-6cf3773853b3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-YYWKKtgz9O9RWz9a_aPPOyl5SrkewG61BGl9UJ7dMUCbnPLLlXcYVp1CXQVI"}
{"level":"debug","ts":"2026-07-22T04:18:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"27dfcb12-3775-4e01-a8ba-6cf3773853b3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-38610b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-YYWKKtgz9O9RWz9a_aPPOyl5SrkewG61BGl9UJ7dMUCbnPLLlXcYVp1CXQVI\"}"}
{"level":"debug","ts":"2026-07-22T04:18:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"27dfcb12-3775-4e01-a8ba-6cf3773853b3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-38610b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bc8d259d-7a4e-42e1-82e7-1228b3779dab","keyName":"e2e-rate-b-1134f5","subscription":"e2e-rate-iso-b-1134f5","tenant":"e2e-shared-b-38610b","userId":"bc8d259d-7a4e-42e1-82e7-1228b3779dab","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T04:18:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"27dfcb12-3775-4e01-a8ba-6cf3773853b3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-38610b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-38610b/rate-test-model-38610b\",\"requestedSubscription\":\"e2e-rate-iso-b-1134f5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T04:18:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"27dfcb12-3775-4e01-a8ba-6cf3773853b3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-38610b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-38610b","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-1134f5","namespace":"ai-tenant-e2e-shared-b-38610b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-38610b/rate-test-model-38610b"}}
{"level":"debug","ts":"2026-07-22T04:18:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"27dfcb12-3775-4e01-a8ba-6cf3773853b3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T04:18:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27dfcb12-3775-4e01-a8ba-6cf3773853b3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:18:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27dfcb12-3775-4e01-a8ba-6cf3773853b3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:18:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27dfcb12-3775-4e01-a8ba-6cf3773853b3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-38610b/rate-test-model-38610b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-38610b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:18:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27dfcb12-3775-4e01-a8ba-6cf3773853b3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T04:18:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27dfcb12-3775-4e01-a8ba-6cf3773853b3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T04:18:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27dfcb12-3775-4e01-a8ba-6cf3773853b3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T04:18:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27dfcb12-3775-4e01-a8ba-6cf3773853b3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-1134f5"}
{"level":"debug","ts":"2026-07-22T04:18:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27dfcb12-3775-4e01-a8ba-6cf3773853b3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"bc8d259d-7a4e-42e1-82e7-1228b3779dab","keyName":"e2e-rate-b-1134f5","selected_subscription":"e2e-rate-iso-b-1134f5","selected_subscription_key":"ai-tenant-e2e-shared-b-38610b/e2e-rate-iso-b-1134f5@ai-tenant-e2e-shared-b-38610b/rate-test-model-38610b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-38610b","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-1134f5","namespace":"ai-tenant-e2e-shared-b-38610b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-38610b/rate-test-model-38610b"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T04:18:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27dfcb12-3775-4e01-a8ba-6cf3773853b3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T04:18:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27dfcb12-3775-4e01-a8ba-6cf3773853b3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T04:18:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/56f4493cba43bef3828a764a11e644a24246a2b9d6dd3e4174f23f637cb68924"}
{"level":"info","ts":"2026-07-22T04:18:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4db610429cf08a3edcbfc9195a743512bcfa424609d0fd6a1dfdf278b8b99c49"}
{"level":"info","ts":"2026-07-22T04:18:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33f564be7d5eae36ca428274803831c71f6ea9d65bdb784ff45927c9737010aa"}
{"level":"info","ts":"2026-07-22T04:18:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b93807c3545ed26cc82b3c2644a5b056f4db5c948a4dc9b0646587071a3a6783"}
{"level":"info","ts":"2026-07-22T04:18:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c664a829ea8b02fcd40e5da1d4d0a59b427c63deebc9b641d8bcf5c5a89aecd7"}
{"level":"info","ts":"2026-07-22T04:18:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d1e3cc110a54858c66776106994db461774f556ba2d1cd9bae2283658310fd03"}
{"level":"info","ts":"2026-07-22T04:18:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f12f87990c117828110247838f7dde8e68687f4dbd3c91f0c345be93f1bffd6"}
{"level":"info","ts":"2026-07-22T04:18:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4cb91deb5294b32b8b342d2449e970d2ad2494a79a97c45645d9f59aed3d7180"}
{"level":"info","ts":"2026-07-22T04:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5043884044a4d4172d1f5d59705782339b255df6ae5c18f17a6b86b683ef739"}
{"level":"info","ts":"2026-07-22T04:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/556acf23f2d24ddffd0caf20ec2097f2d4d36d0a4cd9adb8b423eaacb6f73be3"}
{"level":"info","ts":"2026-07-22T04:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/576145c34970595258c11ed536f327904a340d543c0f2941856d51ef0549a993"}
{"level":"info","ts":"2026-07-22T04:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e2cb8eddf3c434c9d6c300aa8afbbfcb692d8f268f0c1c3f13f2be318f985b7f"}
{"level":"info","ts":"2026-07-22T04:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1022f27ccbab682eacf9ef192085aadc2359e567775f7167dc6611f00e3615ed"}
{"level":"info","ts":"2026-07-22T04:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bbb4ea2ca4a782fd5f5702632fd1371cb9d1b68d1fb1505c1290d70ab31c6d21"}
{"level":"info","ts":"2026-07-22T04:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a267dbb0e309ba697be92b03645e7fb5ed1839151170f15a7193247a81245df"}
{"level":"info","ts":"2026-07-22T04:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da0c0678ced36e288ac208f27e038c966afd5ffbdb6355e6676a5648f6f7bc70"}
{"level":"info","ts":"2026-07-22T04:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20a300f0d3cbdc139b69566e838cc01cf48bfdaca9075d78a3a19cc13000f67e"}
{"level":"info","ts":"2026-07-22T04:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/67c5de7fd2997faafad11d668a8e97a34e1b3d416304fd5f20d877329df536a3"}
{"level":"info","ts":"2026-07-22T04:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f805753dd916c9737e8fe90352ff49c16597d1350398a106782a7f7e1690a1fd"}
{"level":"info","ts":"2026-07-22T04:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d6c4263b7d009c59fdaebe51f1d66d37443e4a842062d380455c28afa0a911b4"}
{"level":"info","ts":"2026-07-22T04:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9aaf4c172da06cc517baefe6a365944c0f3c74abd694620413ba73f63158bf0b"}
{"level":"info","ts":"2026-07-22T04:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e4e547a3859d4dd5d555a844fd33d6b5ec8b386579f0b64b662b8f77ae88505"}
{"level":"info","ts":"2026-07-22T04:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc3254a41c43f259a823f2f11d7618cfd2a3b3e0593f0fe6c7f0bede67ada570"}
{"level":"info","ts":"2026-07-22T04:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b7d6c5035e6354100e79221640eb49ea014590480803283cca6af3e9ee8109ee"}